Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual page 131

Default extension-specific policy plug-in modules (Continued)
Table 4-1
Plug-in module
PolicyConstraintsExt
PolicyMappingsExt
PrivateKeyUsagePeriodExt
RemoveBasicConstraintsExt
SubjectAltNameExt
SubjectDirectoryAttributesExt
SubjectKeyIdentifierExt
As indicated in Table 4-1, Certificate Management System enables you to add
almost all of the extensions defined in the PKIX standard RFC 2459
(
http://www.ietf.org/rfc/rfc2459.txt
common, enabling you to specify these:
• Whether to add the extension to certificates.
• The certificates to which the extension is to be added.
• Whether to mark the extension critical or noncritical.
By default, only noncritical extensions are added to certificates. This ensures that
the resulting certificates can be used with all clients. If you add a critical extension,
the resulting certificate can only be used by clients that support that extension.
Additionally, the server also provides a module for adding any custom, ASN.1
type extensions. If you determine that the default policy modules do not meet your
requirements entirely, you can develop a custom module using CMS SDK. It is
available in the form of Java Docs at this location:
<server_root>/cms_sdk/cms_jdk/javadocs
Function
Adds the Policy Constraints extension to certificates. For details,
see "PolicyConstraintsExt Plug-in Module" on page 221.
Adds the Policy Mappings extension to certificates. For details, see
"PolicyMappingsExt Plug-in Module" on page 224.
Adds the Private Key Usage Period extension to certificates. For
details, see "PrivateKeyUsagePeriodExt Plug-in Module" on
page 228.
Detects and removes the Basic Constraints extension in certificate
requests. For details, see "RemoveBasicConstraintsExt Plug-in
Module" on page 230.
Adds the Subject Alternative Name extension to certificates. For
details, see "SubjectAltNameExt Plug-in Module" on page 232.
Adds a Subject Directory Attributes extension to certificates. For
details, see "SubjectDirectoryAttributesExt Plug-in Module" on
page 238.
Adds the Subject Key Identifier extension to certificates. For
details, see "SubjectKeyIdentifierExt Plug-in Module" on
page 242.
Chapter 4
Overview of Extension-Specific Policy Modules
). All modules have three features in
Certificate Extension Plug-in Modules 131