Table of Contents
Advertisement
AuthorityKeyIdentifierExt Plug-in Module
•
Adds a authority key identifier extension to an enrollment request if the
extension does not already exist. If the extension exists in the request, for
example from a CRMF request, the policy replaces the extension. In case of
manual enrollments, after an agent approves the enrollment request, the policy
accepts any authority key identifier extension that is already there.
During installation, Certificate Management System automatically creates an
instance of the authority key identifier extension policy. See
"AuthorityKeyIdentifierExt Rule" on page 144.
Configuration Parameters of
AuthorityKeyIdentifierExt
In the CMS configuration file, the
identified as
com.netscape.cms.policy.AuthorityKeyIdentifierExt
In the CMS window, the module is identified as
Figure 4-3 shows how the configurable parameters for the module are displayed in
the CMS window.
Figure 4-3
142
Netscape Certificate Management System Plug-Ins Guide • May 2002
Uses the SHA-1 hash of the CA's subject public key information as the key
identifier. This option is compatible with Netscape Communicator when
the CA does not have a subject public key identifier extension.
Does not set the authority key identifier extension.
ca.Policy.impl.AuthorityKeyIdentifierExt.class=
Parameters defined in the AuthorityKeyIdentifierExt module
AuthorityKeyIdentifierExt
AuthorityKeyIdentifierExt
module is
.
.
Advertisement
Table of Contents
