Table of Contents
Advertisement
ValidityConstraints Plug-in Module
However, you can configure the Certificate Manager to issue certificates with
validity periods beyond that of its CA signing certificate by selecting the "Override
validity nesting requirement" option; see section "Step 6. Enable End-Entity
Interaction" in Chapter 18, "Setting Up Policies" of CMS Installation and Setup
Guide.
During installation, Certificate Management System automatically creates an
instance of the validity constraints policy. See "DefaultValidityRule Rule" on
page 125.
Configuration Parameters of ValidityConstraints
In the CMS configuration file, the
<subsystem>.Policy.impl.ValidityConstraints.class=
com.netscape.cms.policy.ValidityConstraints
(prefix identifying the subsystem).
ra
In the CMS window, the module is identified as
3-13 shows how configurable parameters for the module are displayed in the CMS
window.
Figure 3-13
122
Netscape Certificate Management System Plug-Ins Guide • March 2002
ValidityConstraints
Parameters of the ValidityConstraints module
module is identified as
, where
<subsystem>
ValidityConstraints
is
or
ca
. Figure
Advertisement
Table of Contents
