Table of Contents
Advertisement
RemoveBasicConstraintsExt Plug-in Module
The policy can be useful in certain enrollment scenarios. For example, enrollment
requests from customized clients that can generate CRMF requests can include
extensions, including the Basic Constraints extension, and the policy can detect the
presence of the Basic Constraints extension and remove it.
Configuration Parameters of
RemoveBasicConstraintsExt
In the CMS configuration file, the
identified as
com.netscape.certsrv.policy.RemoveBasicConstraintsExt
In the CMS window, the module is identified as
Figure 4-26 shows how the configurable parameters for the module are displayed
in the CMS window.
Figure 4-26
The configuration shown in Figure 4-26 creates a policy rule named
RemoveBasicConstraintsExtForClientCerts
Basic Constraints extension be removed from all client certificate requests.
Table 4-25 provides details for each of these parameters.
232
Netscape Certificate Management System Plug-ins Guide • October 2001
ca.Policy.impl.RemoveBasicConstraintsExt.class=
Parameters defined in the RemoveBasicConstraintsExt module
RemoveBasicConstraintsExt
RemoveBasicConstraintsExt
, which enforces a rule that the
module is
.
.
Advertisement
Table of Contents
