Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual page 192

KeyUsageExt Plug-in Module
Table 4-15 Description of parameters defined in the KeyUsageExt module (Continued)
Parameter
keyAgreement
keyCertsign
cRLSign
192 Netscape Certificate Management System Plug-Ins Guide • May 2002
Description
Specifies whether to set the keyAgreement bit (or bit 4) of the key usage extension
in certificates specified by the predicate parameter.
Permissible values: true, false, or HTTP_INPUT.
• Select true if you want the server to set the bit (default).
• Select false if you don't want the server to set the bit.
• Select HTTP_INPUT if you want the server to check the certificate request for
the HTTP input variable corresponding to the keyAgreement bit and set the
bit accordingly. If the variable is set to true, the server sets the bit. If the
variable doesn't exist or if it is set to false (or any other value), the server
doesn't set the bit.
Specifies whether to set the keyCertSign bit (or bit 5) of the key usage extension
in certificates specified by the predicate parameter.
Permissible values: true, false, or HTTP_INPUT.
• Select true if you want the server to set the bit (default).
• Select false if you don't want the server to set the bit.
• Select HTTP_INPUT if you want the server to check the certificate request for
the HTTP input variable corresponding to the keyCertsign bit and set the bit
accordingly. If the variable is set to true, the server sets the bit. If the variable
doesn't exist or if it is set to false (or any other value), the server doesn't set
the bit.
Specifies whether to set the cRLSign bit (or bit 6) of the key usage extension in
certificates specified by the predicate parameter.
Permissible values: true, false, or HTTP_INPUT.
• Select true if you want the server to set the bit (default).
• Select false if you don't want the server to set the bit.
• Select HTTP_INPUT if you want the server to check the certificate request for
the HTTP input variable corresponding to the CRLsign bit and set the bit
accordingly. If the variable is set to true, the server sets the bit. If the variable
doesn't exist or if it is set to false (or any other value), the server doesn't set
the bit.