Basicconstraintsext - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference
During installation, CMS automatically creates an instance of the authority key
identifier extension policy, named
by default.
Table 11-16 AuthorityKeyIdentifierExt Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable.
enable
Specifies the predicate expression for this rule. If you want this rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see "Using Predicates in Policy Rules" on page 485.
Specifies whether the extension should be marked critical or noncritical. Select to
critical
mark critical, deselect to mark noncritical (default).
Specifies what should be done if the CA certificate does not have a Subject Key
AltKeyIdType
Identifier extension. Select either of the following:
• Select SpkiSHA1 if you want the server to use a SHA-1 hash of the CA's subject
• Select None if you don't want the server to set the authority key identifier

BasicConstraintsExt

The
Constraints Extension in certificates. The extension identifies whether the Certificate
Manager is a CA. The extension is also used during the certificate chain verification
process to identify CA certificates and to apply certificate chain-path length
constraints.
For general information about this extension, see "basicConstraints" on page 725.
During installation, CMS automatically creates an instance of the basic constraints
extension policy, named
Table 11-17 BasicConstraintsExt Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable.
enable
514 Netscape Certificate Management System Administrator's Guide • February 2003
public key information (default).
extension in certificates.
BasicConstraintsExt
BasicConstraintsExt
AuthorityKeyIdentifierExt
plug-in module enables you to add the Basic
, that is enabled by default.
, that is enabled