Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 372

extensions for 329–369
challenge password 22
changing
DER encoding order of DirectoryString 320
Chapter Single Template 311, 327
client certificates
for DSA key pairs 60
CMC request enrollment 59
common features in extension policies 133
constraints-specific policies
attribute present constraints 88
DSA key constraints 93
issuer constraints 96
key algorithm constraints 99
renewal constraints 101
renewal validity constraints 104
revocation constraints 108
RSA key constraints 110
signing algorithm constraints 113
subordinate CA name constraints 116
unique subject name constraints 119
validity constraints 122
constraints-specific policy modules 86
conventions used in this book 14
CRL Distribution Point extension policy 164
CRL extension modules
AuthorityKeyIdentifier 283
CRLNumber 285
CRLReason 286
HoldInstruction 288
InvalidityDate 289
IssuerAlternativeName 291
IssuingDistributionPoint 295
list of 283
CRL publisher 277
cRLDistributionPoints 345
CRLNumber 362
CRLs
extensions for 361–366
extension-specific modules 359
supported versions 281
custom plug-ins
for authentication 22
for logs 300
for mapping directory entries 252
372 Netscape Certificate Management System Plug-ins Guide • October 2001
for policy 133
for publishing to a directory 271
D
Data Recovery Manager
logging to Windows NT event log 306
defining custom OIDs 327
deltaCRLIndicator 363
DER-encoding order of DirectoryString 320
directory
removing expired certificates from 74
directory attributes
adding new 317
supported in CMS 314
directory-based authentication 24
user ID and password 24
user ID, password, and PIN 30
distinguished name (DN)
base DN 313
characters allowed in CMS 314
components 312
defined 311
extending attribute support 316
guidelines for choosing DNs 323
role in certificates 321
CA certificates 322
end-entity certificates 322
root DN 313
DN character support in CMS 314
DN components mapper 257, 262
DN pattern mapper 263
documentation
conventions followed 14
where to find 15
DSA client certificates 60
DSA Key Constraints policy 93
DSA key pairs 60