Table of Contents
Advertisement
ValidityConstraints Plug-in Module
However, you can configure the Certificate Manager to issue certificates with
validity periods beyond that of its CA signing certificate by selecting the "Override
validity nesting requirement" option; see section "Step 6. Enable End-Entity
Interaction" in Chapter 18, "Setting Up Policies" of CMS Installation and Setup
Guide.
During installation, Certificate Management System automatically creates an
instance of the validity constraints policy. See "DefaultValidityRule Rule" on
page 127.
Configuration Parameters of ValidityConstraints
In the CMS configuration file, the
<subsystem>.Policy.impl.ValidityConstraints.class=
com.netscape.certsrv.policy.ValidityConstraints
or
ca
In the CMS window, the module is identified as
3-13 shows how configurable parameters for the module are displayed in the CMS
window.
Figure 3-13
124
Netscape Certificate Management System Plug-ins Guide • October 2001
(prefix identifying the subsystem).
ra
Parameters of the ValidityConstraints module
ValidityConstraints
ValidityConstraints
module is identified as
, where
<subsystem>
. Figure
is
Advertisement
Table of Contents
