Revocationconstraints Plug-In Module; Configuration Parameters Of Revocationconstraints - Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual

RevocationConstraints Plug-in Module

RevocationConstraints Plug-in Module
The
RevocationConstraints
constraints policy. This policy imposes constraints on revocation of expired
certificates—it allows or restricts the server from revoking expired certificates. You
may apply this policy to end-entity certificate revocation requests. For example, if
you don't want to allow revocation of expired certificates in your PKI setup, you
can configure the server accordingly using the policy.
During installation, Certificate Management System automatically creates an
instance of the revocation constraints policy. See "Configuration Parameters of
RevocationConstraints" on page 108.
Configuration Parameters of
RevocationConstraints
In the CMS configuration file, the
<subsystem>.Policy.impl.RevocationConstraints.class=
com.netscape.certsrv.policy.RevocationConstraints
is
ca
In the CMS window, the module is identified as
3-8 shows how the configurable parameters for the module are displayed in the
CMS window.
Figure 3-8
108 Netscape Certificate Management System Plug-ins Guide • October 2001
or (prefix identifying the subsystem).
ra
Parameters of the RevocationConstraints module
plug-in module implements the revocation
RevocationConstraints
RevocationConstraints
module is identified as
, where
<subsystem>
. Figure