Table of Contents
Advertisement
RevocationConstraints Plug-in Module
RevocationConstraints Plug-in Module
The
RevocationConstraints
constraints policy. This policy imposes constraints on revocation of expired
certificates—it allows or restricts the server from revoking expired certificates. You
may apply this policy to end-entity certificate revocation requests. For example, if
you don't want to allow revocation of expired certificates in your PKI setup, you
can configure the server accordingly using the policy.
During installation, Certificate Management System automatically creates an
instance of the revocation constraints policy. See "Configuration Parameters of
RevocationConstraints" on page 106.
Configuration Parameters of
RevocationConstraints
In the CMS configuration file, the
<subsystem>.Policy.impl.RevocationConstraints.class=
com.netscape.cms.policy.RevocationConstraints
or
ra
In the CMS window, the module is identified as
3-8 shows how the configurable parameters for the module are displayed in the
CMS window.
Figure 3-8
106
Netscape Certificate Management System Plug-Ins Guide • March 2002
(prefix identifying the subsystem).
Parameters of the RevocationConstraints module
plug-in module implements the revocation
RevocationConstraints
RevocationConstraints
module is identified as
, where
<subsystem>
. Figure
is
ca
Advertisement
Table of Contents
