Table of Contents
Advertisement
CRLNumber Rule
CRLNumber Rule
The
rule enables you to configure a Certificate Manager to set the CRL
CRLNumber
Number Extension defined in X.509 and PKIX standard RFC 2459 (see
) in CRLs. This extension specifies a
http://www.ietf.org/rfc/rfc2459.txt
monotonically increasing sequence number for each CRL issued by a CA, allowing
CRL users to easily determine when a particular CRL supersedes another CRL.
For general guidelines on setting the CRL number extension in CRLs, see
"CRLNumber" on page 361.
Figure 7-3 shows how the configurable parameters for the
rule are
CRLNumber
displayed in the CMS window.
Figure 7-3
Parameters defined in the CRLNumber rule
The configuration shown in Figure 7-3 specifies that the server should not set the
CRL number extension in CRLs.
Table 7-3 describes these parameters.
Chapter 7
CRL Extension Plug-in Modules
283
Advertisement
Table of Contents
