Ocspnocheckext - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference
Table 11-33 NSCertTypeExt Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable
enable
(default).
Specifies the predicate expression for this rule. If you want this rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see"Using Predicates in Policy Rules," on page 485.
Specifies whether to set the Netscape certificate type extension with default bits in
setDefaultBits
certificates specified by the predicate expression.
• Select if you want the server to add the extension, with default bits, to certificates.
• Deselect if you don't want the server to add the extension with default bits. If you

OCSPNoCheckExt

The
Extension to certificates. The extension, which should be used in OCSP responder
certificates only, indicates how OCSP-compliant applications can verify the
revocation status of the certificate an authorized OCSP responder uses to sign
OCSP responses.
For general information about this extension, see "OCSPNocheck" on page 730.
During installation, CMS automatically creates an instance of the OCSP no check
extension policy, named
Table 11-34 OCSPNoCheckExt Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable.
enable
Specifies the predicate expression for this rule. If you want this rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see"Using Predicates in Policy Rules," on page 485.
552 Netscape Certificate Management System Administrator's Guide • February 2003
If you select and if no bits are requested from the HTTP input, the server adds the
Netscape certificate type extension to certificates with the following bits set:
- ssl client (bit 0)
- email (bit 2)
deselect and if no bits are requested from the HTTP input, the server does not add
the extension to certificates.
plug-in module enables you to add the OCSP No Check
OCSPNoCheckExt
OCSPNoCheckExt
, that is enabled by default.