Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 551

Table 11-32 HTTP input variables for Netscape certificate type extension bits
HTTP input variable
ssl_client
ssl_server
email
object_signing
ssl_ca
email_ca
object_signing_ca
During installation, CMS automatically creates an instance of the Netscape
certificate type extension policy for the various types of certificates that you may
want the server to issue, named
Additionally, the default enrollment forms—the directory-based, directory- and
PIN-based, manual, Kerberos server-based, and NIS server-based enrollment
forms—for various types of certificates also include the appropriate HTTP input
variables corresponding to Netscape certificate type extension bits. For details
about these forms.
Note that the default enrollment forms embed variables that are considered
appropriate for the type of certificate, such as client, server, or CA, that can be
requested using the form. For example, the server enrollment form embeds the
variable, whereas the subordinate CA (Certificate Manager)
ssl_server
enrollment form embeds the
object_signing_ca
In general, the forms are set up so that you don't have to make any modifications.
However, if there is a need to modify the bit settings, be sure to add or remove the
corresponding variable. Also, when adding a new variable, make sure that the
HTML input format is as follows:
<input type="HIDDEN" value="true" name="variable_name">
where
variable_name
Netscape certificate type extension bit
SSL Client (bit 0)
SSL Server (bit 1)
S/MIME (bit 2)
Object Signing (bit 3)
Reserved for future use (bit 4)
SSL CA (bit 5)
S/MIME CA (bit 6)
Object Signing CA (bit 7)
NSCertTypeExt
,
ssl_client
variables.
can be any of the variables listed in Table 11-32.
Extension-Specific Policy Module Reference
, that is enabled by default.
, and
email_ca ssl_ca
Chapter 11 Policies 551