Table of Contents
Advertisement
Overview of Constraints-Specific Policy Modules
•
RevocationConstraints Plug-in Module (page 106)
•
RSAKeyConstraints Plug-in Module (page 108)
•
SigningAlgorithmConstraints Plug-in Module (page 111)
•
SubCANameConstraints Plug-in Module (page 114)
•
UniqueSubjectNameConstraints Plug-in Module (page 117)
•
ValidityConstraints Plug-in Module (page 120)
Overview of Constraints-Specific Policy Modules
Constraints-specific policy plug-in modules help you define rules or constraints
that Certificate Management System uses to evaluate an incoming certificate
enrollment, renewal, or revocation request. Each module enables you to configure
the server to check the request for particular attributes, and, based on the
configured criteria, either modify these attributes or reject the request altogether.
Policy plug-in modules are implemented as Java classes and are registered in the
CMS policy framework. The Policy Plugin Registration tab of the CMS window
(Figure 3-1) lists all the modules that are registered with a CMS instance.
Figure 3-1
84
Netscape Certificate Management System Plug-Ins Guide • March 2002
CMS window showing policy modules registered with a Certificate Manager
Advertisement
Table of Contents
