Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 359

Modifying the Configuration
ca.Policy.rule.PolicyConstraintsExt.enable=false
ca.Policy.rule.PolicyConstraintsExt.implName=PolicyConstraintsExt
ca.Policy.rule.PolicyConstraintsExt.inhibitPolicyMapping=0
ca.Policy.rule.PolicyConstraintsExt.predicate=certType==ca
ca.Policy.rule.PolicyConstraintsExt.reqExplicitPolicy=0
ca.Policy.rule.PolicyMappingsExt.critical=false
ca.Policy.rule.PolicyMappingsExt.enable=false
ca.Policy.rule.PolicyMappingsExt.implName=PolicyMappingsExt
ca.Policy.rule.PolicyMappingsExt.numPolicyMappings=1
ca.Policy.rule.PolicyMappingsExt.predicate=certType==ca
ca.Policy.rule.PolicyMappingsExt.policyMap0.issuerDomainPolicy=
ca.Policy.rule.PolicyMappingsExt.policyMap0.subjectDomainPolicy=
ca.Policy.rule.RMCertKeyUsageExt.digitalSignature=true
ca.Policy.rule.RMCertKeyUsageExt.enable=true
ca.Policy.rule.RMCertKeyUsageExt.implName=KeyUsageExt
ca.Policy.rule.RMCertKeyUsageExt.nonRepudiation=true
ca.Policy.rule.RMCertKeyUsageExt.predicate=certType==ra
ca.Policy.rule.RSAKeyRule.enable=false
ca.Policy.rule.RSAKeyRule.exponents=3,7,17,65537
ca.Policy.rule.RSAKeyRule.implName=RSAKeyConstraints
ca.Policy.rule.RSAKeyRule.maxSize=2048
ca.Policy.rule.RSAKeyRule.minSize=512
ca.Policy.rule.RSAKeyRule.predicate=
ca.Policy.rule.RenewalConstraintsRule.enable=true
ca.Policy.rule.RenewalConstraintsRule.implName=RenewalConstraints
ca.Policy.rule.RenewalConstraintsRule.predicate=
ca.Policy.rule.RevocationConstraintsRule.enable=true
ca.Policy.rule.RevocationConstraintsRule.implName=RevocationConstraints
ca.Policy.rule.RevocationConstraintsRule.predicate=
ca.Policy.rule.ServerCertKeyUsageExt.dataEncipherment=true
ca.Policy.rule.ServerCertKeyUsageExt.digitalSignature=true
ca.Policy.rule.ServerCertKeyUsageExt.enable=true
ca.Policy.rule.ServerCertKeyUsageExt.implName=KeyUsageExt
ca.Policy.rule.ServerCertKeyUsageExt.keyEncipherment=true
ca.Policy.rule.ServerCertKeyUsageExt.nonRepudiation=true
ca.Policy.rule.ServerCertKeyUsageExt.predicate=certType==server
ca.Policy.rule.SigningAlgRule.algorithms=MD5withRSA,MD2withRSA,SHA1withRSA,SHA1withDSA
ca.Policy.rule.SigningAlgRule.enable=true
ca.Policy.rule.SigningAlgRule.implName=SigningAlgorithmConstraints
ca.Policy.rule.SigningAlgRule.predicate=
ca.Policy.rule.SubCANameCheck.enable=true
ca.Policy.rule.SubCANameCheck.implName=SubCANameCheck
ca.Policy.rule.SubCANameCheck.predicate=
ca.Policy.rule.SubjectAltNameExt.enable=true
Chapter 10 CMS Configuration 359