Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 348

Modifying the Configuration
ca.Policy.rule.RenewalConstraintsRule.enable=true
ca.Policy.rule.RenewalConstraintsRule.implName=RenewalConstraints
ca.Policy.rule.RenewalConstraintsRule.predicate=
ca.Policy.rule.RevocationConstraintsRule.enable=true
ca.Policy.rule.RevocationConstraintsRule.implName=RevocationConstraints
ca.Policy.rule.RevocationConstraintsRule.predicate=
ca.Policy.rule.ServerCertKeyUsageExt.dataEncipherment=true
ca.Policy.rule.ServerCertKeyUsageExt.digitalSignature=true
ca.Policy.rule.ServerCertKeyUsageExt.enable=true
ca.Policy.rule.ServerCertKeyUsageExt.implName=KeyUsageExt
ca.Policy.rule.ServerCertKeyUsageExt.keyEncipherment=true
ca.Policy.rule.ServerCertKeyUsageExt.nonRepudiation=true
ca.Policy.rule.ServerCertKeyUsageExt.predicate=certType==server
ca.Policy.rule.SigningAlgRule.algorithms=MD5withRSA,MD2withRSA,SHA1withRSA,SHA1withDSA
ca.Policy.rule.SigningAlgRule.enable=true
ca.Policy.rule.SigningAlgRule.implName=SigningAlgorithmConstraints
ca.Policy.rule.SigningAlgRule.predicate=
ca.Policy.rule.SubCANameCheck.enable=true
ca.Policy.rule.SubCANameCheck.implName=SubCANameCheck
ca.Policy.rule.SubCANameCheck.predicate=
ca.Policy.rule.SubjectAltNameExt.enable=true
ca.Policy.rule.SubjectAltNameExt.enableManualValues=false
ca.Policy.rule.SubjectAltNameExt.implName=SubjectAltNameExt
ca.Policy.rule.SubjectKeyIdentifierExt.enable=true
ca.Policy.rule.SubjectKeyIdentifierExt.implName=SubjectKeyIdentifierExt
ca.Policy.rule.SubjectKeyIdentifierExt.predicate=certType==ca
ca.Policy.rule.UniqueSubjectName.enable=false
ca.Policy.rule.UniqueSubjectName.implName=UniqueSubjectName
ca.Policy.rule.UniqueSubjectName.predicate=
ca.crl._000=##
ca.crl._001=## CA CRL
ca.crl._002=##
ca.crl.MasterCRL.allowExtensions=false
ca.crl.MasterCRL.autoUpdateInterval=20
ca.crl.MasterCRL.cacheUpdateInterval=5
ca.crl.MasterCRL.class=com.netscape.cmscore.ca.CRLIssuingPoint
ca.crl.MasterCRL.description=CA's complete Certificate Revocation List
ca.crl.MasterCRL.enableCRLCache=true
ca.crl.MasterCRL.nextUpdateSkew=5
ca.crl.MasterCRL.extension.AuthorityKeyIdentifier.class=com.netscape.cmscore.ca.
CMSAuthorityKeyIdentifierExtension
ca.crl.MasterCRL.extension.AuthorityKeyIdentifier.critical=false
ca.crl.MasterCRL.extension.AuthorityKeyIdentifier.enable=false
ca.crl.MasterCRL.extension.AuthorityKeyIdentifier.type=CRLExtension
ca.crl.MasterCRL.extension.CRLNumber.class=com.netscape.cmscore.ca.
348 Netscape Certificate Management System Installation and Setup Guide • March 2002