Table of Contents
Advertisement
HoldInstruction Rule
HoldInstruction Rule
The
HoldInstruction
the CRL Hold Instruction Extension defined in X.509 and PKIX standard RFC 2459
(see
non-critical CRL entry extension that is used to specify a registered instruction
identifier—the identifier indicates what action the validating application should
take when it encounters a certificate that has been placed on hold.
For general guidelines on setting the CRL hold instruction code in CRL entries, see
"holdInstructionCode" on page 365.
Figure 7-5 shows how the configurable parameters for the
are displayed in the CMS window.
Figure 7-5
The configuration shown in Figure 7-5 specifies that the server should not set the
hold instruction extension in CRL entries.
Table 7-6 describes these parameters.
286
Netscape Certificate Management System Plug-Ins Guide • March 2002
rule enables you to configure a Certificate Manager to set
http://www.ietf.org/rfc/rfc2459.txt
Parameters defined in the HoldInstruction rule
) in CRLs. The extension is a
HoldInstruction
rule
Advertisement
Table of Contents
