Table of Contents
Advertisement
RemoveBasicConstraintsExt Plug-in Module
The policy can be useful in certain enrollment scenarios. For example, enrollment
requests from customized clients that can generate CRMF requests can include
extensions, including the Basic Constraints extension, and the policy can detect the
presence of the Basic Constraints extension and remove it.
Configuration Parameters of
RemoveBasicConstraintsExt
In the CMS configuration file, the
module is
RemoveBasicConstraintsExt
identified as
ca.Policy.impl.RemoveBasicConstraintsExt.class=
.
com.netscape.cms.policy.RemoveBasicConstraintsExt
In the CMS window, the module is identified as
.
RemoveBasicConstraintsExt
Figure 4-26 shows how the configurable parameters for the module are displayed
in the CMS window.
Parameters defined in the RemoveBasicConstraintsExt module
Figure 4-26
The configuration shown in Figure 4-26 creates a policy rule named
, which enforces a rule that the
RemoveBasicConstraintsExtForClientCerts
Basic Constraints extension be removed from all client certificate requests.
Table 4-25 provides details for each of these parameters.
Chapter 4
Certificate Extension Plug-in Modules
231
Advertisement
Table of Contents
