Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 133

Default extension-specific policy plug-in modules (Continued)
Table 4-1
Plug-in module
PolicyConstraintsExt
PolicyMappingsExt
PrivateKeyUsagePeriodExt
RemoveBasicConstraintsExt
SubjectAltNameExt
SubjectDirectoryAttributesExt
SubjectKeyIdentifierExt
As indicated in Table 4-1, Certificate Management System enables you to add
almost all of the extensions defined in the PKIX standard RFC 2459
(
http://www.ietf.org/rfc/rfc2459.txt
common, enabling you to specify these:
• Whether to add the extension to certificates.
• The certificates to which the extension is to be added.
• Whether to mark the extension critical or noncritical.
By default, only noncritical extensions are added to certificates. This ensures that
the resulting certificates can be used with all clients. If you add a critical extension,
the resulting certificate can only be used by clients that support that extension.
Additionally, the server also provides a module for adding any custom, ASN.1
type extensions. If you determine that the default policy modules do not meet your
requirements entirely, you can develop a custom module using CMS SDK. It is
available in the form of Java Docs at this location:
<server_root>/cms_sdk/cms_jdk/javadocs
Function
Adds the Policy Constraints extension to certificates. For details,
see "PolicyConstraintsExt Plug-in Module" on page 222.
Adds the Policy Mappings extension to certificates. For details, see
"PolicyMappingsExt Plug-in Module" on page 225.
Adds the Private Key Usage Period extension to certificates. For
details, see "PrivateKeyUsagePeriodExt Plug-in Module" on
page 229.
Detects and removes the Basic Constraints extension in certificate
requests. For details, see "RemoveBasicConstraintsExt Plug-in
Module" on page 231.
Adds the Subject Alternative Name extension to certificates. For
details, see "SubjectAltNameExt Plug-in Module" on page 233.
Adds a Subject Directory Attributes extension to certificates. For
details, see "SubjectDirectoryAttributesExt Plug-in Module" on
page 239.
Adds the Subject Key Identifier extension to certificates. For
details, see "SubjectKeyIdentifierExt Plug-in Module" on
page 243.
Chapter 4
Overview of Extension-Specific Policy Modules
). All modules have three features in
Certificate Extension Plug-in Modules 133