Removebasicconstraintsext Plug-In Module - Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual

RemoveBasicConstraintsExt Plug-in Module

Table 4-24 provides details for each of these parameters.
Table 4-24 Description of parameters defined in the PrivateKeyUsagePeriodExt module
Parameter Description
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
enable
Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server adds
• If you disable the rule, the server does not add the extension to certificates; it
Specifies the predicate expression for this rule. If you want this rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see section "Using Predicates in Policy Rules" in Chapter 18, "Setting Up Policies" of
CMS Installation and Setup Guide.
Example: HTTP_PARAMS.certType==client
Specifies whether the extension should be marked critical or noncritical in certificates
critical
specified by the predicate parameter. Check the box if you want the server to mark
the extension critical. Uncheck the box if you want the server to mark the extension
noncritical (default).
Specifies the date on which the validity period for the private key associated with the
notBefore
certificate begins.
Permissible values: A valid date specified in the MM/DD/YYYY format.
Example: 03/30/2002
Specifies the date on which the validity period for the private key associated with the
notAfter
certificate ends.
Permissible values: A valid date specified in the MM/DD/YYYY format.
Example: 09/26/2002
RemoveBasicConstraintsExt Plug-in Module
The
constraints extension policy. This policy, if enabled, can detect the presence of Basic
Constraints extension in a certificate request and remove it. For details about the
Basic Constraints extension, see "BasicConstraintsExt Plug-in Module" on
page 144.
230 Netscape Certificate Management System Plug-Ins Guide • May 2002
the private key usage period extension to certificates specified by the predicate
parameter.
ignores the values in the remaining fields.
RemoveBasicConstraintsExt
plug-in module implements the remove basic