Table of Contents
Advertisement
During installation, Certificate Management System automatically creates an
instance of the OCSP no check extension policy. See "OCSPNoCheckExt Rule" on
page 220.
Configuration Parameters of OCSPNoCheckExt
In the CMS configuration file, the
<subsystem>.Policy.impl.OCSPNoCheckExt.class=com.netscape.
cms.policy.OCSPNoCheckExt
the subsystem).
In the CMS window, the module is identified as
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-22
Parameters defined in the OCSPNoCheckExt module
The configuration shown in Figure 4-22 creates a policy rule named
OCSPNoCheckExtForResponderCert
set the OCSP no check extension in OCSP responder certificates only.
Table 4-21 provides details for each of these parameters.
OCSPNoCheckExt
, where
<subsystem>
OCSPNoCheckExt
, which enforces a rule that the server should
Chapter 4
OCSPNoCheckExt Plug-in Module
module is identified as
is
or
(prefix identifying
ca
ra
. Figure 4-22
Certificate Extension Plug-in Modules
219
Advertisement
Table of Contents
