Configuration Parameters Of Privatekeyusageperiodext - Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual

The private key usage period extension policy in Certificate Management System
allows setting of the private key usage period extension as defined in its X.509
definition. The policy enables you to specify values for the
components. When included in a certificate, the
notAfter
components define the time before and after which the private key
notAfter
associated with the certificate should not be used to sign objects.
Configuration Parameters of
PrivateKeyUsagePeriodExt
In the CMS configuration file, the
identified as
<subsystem>.Policy.impl.PrivateKeyUsagePeriodExt.class=
com.netscape.cms.policy.PrivateKeyUsagePeriodExt
or (prefix identifying the subsystem).
ca ra
In the CMS window, the module is identified as
Figure 4-25 shows how the configurable parameters for the module are displayed
in the CMS window.
Figure 4-25 Parameters defined in the PrivateKeyUsagePeriodExt module
The configuration shown in Figure 4-25 creates a policy rule named
PrivKeyUsagePrdExtForClientCert
set the private key usage period extension in client certificates.
PrivateKeyUsagePeriodExt Plug-in Module
PrivateKeyUsagePeriodExt
PrivateKeyUsagePeriodExt
, which enforces a rule that the server should
Chapter 4 Certificate Extension Plug-in Modules
and
notBefore
and
notBefore
module is
, where
<subsystem>
.
is
229