Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual page 150

CertificatePoliciesExt Plug-in Module
Figure 4-5
The configuration shown in Figure 4-5 creates a policy rule named
CertPoliciesExtForClientCert
the certificate policies extension in all client certificates.
Table 4-5 gives details about each of these parameters.
Table 4-5 Description of parameters defined in the CertificatePoliciesExt module
Parameter
enable
predicate
150 Netscape Certificate Management System Plug-Ins Guide • May 2002
Parameters defined in the CertificatePoliciesExt module
Description
Specifies whether the rule is enabled or disabled.
• Check the box to enable the rule (default). If you enable the rule and set the
remaining parameters correctly, the server adds the certificate policies
extension to certificates specified by the predicate parameter.
• Uncheck the box to disable the rule. If you disable the rule, the server does not
add the extension to certificates; it ignores the values in the remaining fields.
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate
expression, see section "Using Predicates in Policy Rules" in Chapter 18, "Setting
Up Policies" of CMS Installation and Setup Guide.
Example: HTTP_PARAMS.certType==client
, which enforces a rule that the server should set