Policymappingsext - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference
Table 11-35 PolicyConstraintsExt Configuration Parameters (Continued)
Parameter Description
Specifies the total number of certificates permitted in the path before an explicit
reqExplicit
policy is required—that is, the number of CA certificates that can be chained below
Policy
(subordinate to) the subordinate CA certificate being issued before an acceptable
policy is required.
Note that the number you specify affects the number of CA certificates to be used
during certificate validation. The chain starts with the end-entity certificate being
validated and moving up the chain. (The parameter has no effect if the extension is set
in end-entity certificates.)
Permissible values: -1, 0, or n.
• -1 specifies that the field should not be set in the extension (default).
• 0 specifies that no subordinate CA certificates are permitted in the path before an
• n must be an integer that is greater than zero. It specifies at the most n
Specifies the total number of certificates permitted in the path before policy mapping
inhibitPolicy
is no longer permitted.
Mapping
Permissible values: -1, 0, or n.
• -1 specifies that the field should not be set in the extension (default).
• 0 specifies that no subordinate CA certificates are permitted in the path before
• n must be an integer that is greater than zero. It specifies at the most n

PolicyMappingsExt

The
Extension defined to certificates. The extension lists one or more pairs of OIDs, each
pair identifying two policy statements of two CAs. The pairing indicates that the
corresponding policies of one CA are equivalent to policies of another CA. The
554 Netscape Certificate Management System Administrator's Guide • February 2003
explicit policy is required.
subordinate CA certificates are allowed in the path before an explicit policy is
required.
policy mapping is no longer permitted.
subordinate CA certificates are allowed in the path before policy mapping is no
longer permitted. For example, a value of one indicates that policy mapping may
be processed in certificates issued by the subject of this certificate, but not in
additional certificates in the path.
PolicyMappingsExt
plug-in module enables you to add the Policy Mappings