Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 215

NSCertTypeExt Plug-in Module
Additionally, the default enrollment forms—the directory-based, directory- and
PIN-based, manual, Kerberos server-based, and NIS server-based enrollment
forms—for various types of certificates also include the appropriate HTTP input
variables corresponding to Netscape certificate type extension bits. For details
about these forms, see "Enrollment Forms" on page 55.
Figure 4-20 shows the default directory-based enrollment form for end users with
HTTP input variables specific to Netscape certificate type extension highlighted; it
and
shows two of the total number of variables listed in Table 4-19,
ssl_client
, indicating that these bits be set in certificates requested using this form.
email
Figure 4-20 Netscape certificate type extension-specific variables in enrollment forms
Note that the default enrollment forms embed variables that are considered
appropriate for the type of certificate, such as client, server, or CA, that can be
requested using the form. For example, the server enrollment form embeds the
variable, whereas the subordinate CA (Certificate Manager)
ssl_server
enrollment form embeds the , , and
ssl_client email_ca ssl_ca
variables.
object_signing_ca
In general, the forms are set up so that you don't have to make any modifications.
However, if there is a need to modify the bit settings, be sure to add or remove the
corresponding variable. Also, when adding a new variable, make sure that the
HTML input format is as follows:
<input type="HIDDEN" value="true" name="variable_name">
Chapter 4 Certificate Extension Plug-in Modules 215