Netscape MANAGEMENT SYSTEM 6.0 - PLUG-IN Manual page 372

extensions for 327–369
challenge password 20
changing
DER encoding order of DirectoryString 318
Chapter Single Template 309, 325
client certificates
for DSA key pairs 58
CMC request enrollment 57
common features in extension policies 131
constraints-specific policies
attribute present constraints 86
DSA key constraints 91
issuer constraints 94
key algorithm constraints 97
renewal constraints 99
renewal validity constraints 102
revocation constraints 106
RSA key constraints 108
signing algorithm constraints 111
subordinate CA name constraints 114
unique subject name constraints 117
validity constraints 120
constraints-specific policy modules 84
conventions used in this book 14
CRL Distribution Point extension policy 163
CRL extension modules
AuthorityKeyIdentifier 281
CRLNumber 283
CRLReason 284
HoldInstruction 286
InvalidityDate 287
IssuerAlternativeName 289
IssuingDistributionPoint 293
list of 281
CRL publisher 275
cRLDistributionPoints 343
CRLNumber 361
CRLs
extensions for 360–366
extension-specific modules 357
supported versions 279
custom plug-ins
for authentication 20
for logs 298
for mapping directory entries 250
372 Netscape Certificate Management System Plug-Ins Guide • March 2002
for policy 131
for publishing to a directory 269
D
Data Recovery Manager
logging to Windows NT event log 304
defining custom OIDs 325
deltaCRLIndicator 362
DER-encoding order of DirectoryString 318
directory
removing expired certificates from 72
directory attributes
adding new 315
supported in CMS 312
directory-based authentication 22
user ID and password 22
user ID, password, and PIN 28
distinguished name (DN)
base DN 311
characters allowed in CMS 312
components 310
defined 309
extending attribute support 314
guidelines for choosing DNs 321
role in certificates 319
CA certificates 320
end-entity certificates 320
root DN 311
DN character support in CMS 312
DN components mapper 254, 260
DN pattern mapper 261
documentation
conventions followed 14
where to find 15
DSA client certificates 58
DSA Key Constraints policy 91
DSA key pairs 58