Subjectkeyidentifierext - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference
Table 11-40 SubjectDirectoryAttributesExt Configuration Parameters (Continued)
Parameter
critical
numAttributes
attribute<n>.attrib
uteName
attribute<n>.whereT
oGetValue
attribute<n>.value

SubjectKeyIdentifierExt

The
SubjectKeyIdentifierExt
Identifier Extension to certificates. The extension is used to identify certificates that
contain a particular public key—that is, the extension is used to uniquely identify a
certificate from among several that have the same subject name.
562 Netscape Certificate Management System Administrator's Guide • February 2003
Description
Specifies whether the extension should be marked critical or noncritical. Select
to mark critical, deselect to mark noncritical (default).
Specifies the total number of directory attributes to be contained or allowed in
the extension.
You can configure the server to include up to three attributes in the extension.
By default, this field is set to its maximum value, 3, and the UI shows fields for
configuring three attributes. You can change the total number of attributes by
changing the value of this parameter. Each set of configuration parameters is
distinguished by <n>, which is an integer derived from the value you assign in
this field. For example, if you set the numAttributes parameter to 2, <n>
would be 0 and 1.
Specifies the name of the directory attribute whose value is to be included in
the extension.
Permissible values: TITLE, O, OU, L, E, C, GIVENNAME, DC, UID, CN,
UNSTRUCTUREDNAME, GENERATIONQUALIFIER, ST, DNQUALIFIER, SN, MAIL,
UNSTRUCTUREDADDRESS, STREET, SERIALNUMBER, and INITIALS. The list
may show any additional attributes that you may have added.
Specifies where to get the value for the selected directory attribute.
• Select Request Attribute if you want the server to read the value from
the request attribute.
• Select Fixed Value if you want to specify a fixed value for the attribute.
Note that both the options require you to enter the value for the attribute in the
attribute<n>.value field. The server will set the extension with this value
in all certificates specified by the predicate parameter.
Specifies the value for the directory attribute to be included in the extension.
Permissible value: A string value for the attribute selected.
Example: Member of Technical Staff
plug-in module enables you to add the Subject Key