Table of Contents
Advertisement
RenewalConstraints Plug-in Module
weeks of validity of the certificate. However, if the interval specified in the policy
rule is not sufficient for renewal to occur, some of your users may not be able to
renew their certificates prior to the expiration time and end up owning expired
certificates.
Note that the policy also allows you to specify how long after the expiration of a
certificate can it be renewed. If you don't specify this, the server will renew all
expired certificates that are submitted for renewal.
During installation, Certificate Management System automatically creates an
instance of the renewal constraints policy. See "RenewalConstraintsRule Rule" on
page 101.
Configuration Parameters of
RenewalConstraints
In the CMS configuration file, the
<subsystem>.Policy.impl.RenewalConstraints.class=
com.netscape.cms.policy.RenewalConstraints
(prefix identifying the subsystem).
ra
In the CMS window, the module is identified as
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 3-6
100
Netscape Certificate Management System Plug-Ins Guide • May 2002
RenewalConstraints
Parameters of the RenewalConstraints module
module is identified as
, where
<subsystem>
RenewalConstraints
is
or
ca
. Figure 3-6
Advertisement
Table of Contents
