Table of Contents
Advertisement
The certificate policies extension policy in Certificate Management System enables
you to set the extension with the following information:
•
The name of the your company or organization.
•
The OID assigned to the policy statement you want to include in the certificate.
•
A pointer (URI) to the published Certification Practice Statement (CPS).
Any company deploying its own PKI should make a CPS available to anyone
who may come across certificates issued by the CA deployed in the PKI. (The
reason for this is people outside the company intranet may receive signed
email messages from an employee.) To see an example of a CPS, check this site:
http://people.netscape.com/shadow/cps.html
•
A textual user notice (which the application validating the certificate can
interpret and display).
During installation, Certificate Management System automatically creates an
instance of the certificate policies extension policy. See "CertificatePoliciesExt
Rule" on page 152.
Configuration Parameters of
CertificatePoliciesExt
In the CMS configuration file, the
as
<subsystem>.Policy.impl.CertificatePoliciesExt.class=
com.netscape.cms.policy.CertificatePoliciesExt
or
(prefix identifying the subsystem).
ra
In the CMS window, the module is identified as
4-5 shows how the configurable parameters for the module are displayed in the
CMS window.
CertificatePoliciesExt
CertificatePoliciesExt
Chapter 4
Certificate Extension Plug-in Modules
CertificatePoliciesExt Plug-in Module
module is identified
, where
<subsystem>
. Figure
is
ca
149
Advertisement
Table of Contents
