Table of Contents
Advertisement
Uses the SHA-1 hash of the CA's subject public key information as the key
identifier. This option is compatible with Netscape Communicator when
the CA does not have a subject public key identifier extension.
Does not set the authority key identifier extension.
•
Adds a authority key identifier extension to an enrollment request if the
extension does not already exist. If the extension exists in the request, for
example from a CRMF request, the policy replaces the extension. In case of
manual enrollments, after an agent approves the enrollment request, the policy
accepts any authority key identifier extension that is already there.
During installation, Certificate Management System automatically creates an
instance of the authority key identifier extension policy. See
"AuthorityKeyIdentifierExt Rule" on page 145.
Configuration Parameters of
AuthorityKeyIdentifierExt
In the CMS configuration file, the
identified as
ca.Policy.impl.AuthorityKeyIdentifierExt.class=
com.netscape.certsrv.policy.AuthorityKeyIdentifierExt
In the CMS window, the module is identified as
Figure 4-3 shows how the configurable parameters for the module are displayed in
the CMS window.
Parameters defined in the AuthorityKeyIdentifierExt module
Figure 4-3
AuthorityKeyIdentifierExt Plug-in Module
AuthorityKeyIdentifierExt
AuthorityKeyIdentifierExt
Chapter 4
Certificate Extension Plug-in Modules
module is
.
.
143
Advertisement
Table of Contents
