Table of Contents
Advertisement
PolicyMappingsExt Plug-in Module
The policy mappings extension policy in Certificate Management System allows
setting of the policy mappings extension as defined in its X.509 definition. The
policy allows you to map policy statements of one CA to that of another by pairing
the OIDs assigned to their policy statements. (For information on OIDs, see
Appendix B, "Object Identifiers.") For information on certificate policies, see
"CertificatePoliciesExt Plug-in Module" on page 148.)
Each pair is defined by two parameters,
and
issuerDomainPolicy
. The pairing indicates that the issuing CA considers the
subjectDomainPolicy
equivalent to the
of the subject CA.
issuerDomainPolicy
subjectDomainPolicy
The issuing CA's users may accept an
for certain
issuerDomainPolicy
applications. The policy mapping tells these users which policies associated with
the subject CA are equivalent to the policy they accept.
During installation, Certificate Management System automatically creates an
instance of the policy mappings extension policy. See "PolicyMappingsExt Rule"
on page 228.
Configuration Parameters of PolicyMappingsExt
In the CMS configuration file, the
module is identified as
PolicyMappingsExt
ca.Policy.impl.PolicyMappingsExt.class=com.netscape.cms.
.
policy.PolicyMappingsExt
In the CMS window, the module is identified as
. Figure 4-24
PolicyMappingsExt
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-24
Parameters defined in the PolicyMappingsExt module
Chapter 4
Certificate Extension Plug-in Modules
225
Advertisement
Table of Contents
