Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 649

type. Select the type value from the list. The type value depends on which type
of certificate this rule applies. For a Certificate Manager signing certificate, the
value is
types of certificates, the value is
predicate. Type the predicate value for the type of certificate, or CRL issuing
point this rule applies. The predicate value for each type of certificate is listed
in Table 15-11 on page 649
delta CRLs is listed in Table 15-12 on page 650
enable. Select to enable this rule.
mapper. Mappers are not necessary when publishing to a file, they are only
needed for LDAP publishing. If this rule will be associated with a publisher
that publishes to an LDAP directory, select an appropriate mapper here. Leave
blank for all other forms of publishing.
publisher. Select a publisher you created that will be associated with this rule.
For example, if this rule publishes user certificates to a file, chose the publisher
that publishes to a file in the location set up for user certificates.
Click OK.
7.
The Rules Management tab appears, listing the new rule you just created for
publishing the CA certificate to the file.
Repeat this procedure to create publishing rules for each rule you will need.
8.
Predicates Used In Publishing Rules
Table 15-11 lists the predicates that can be used to identify certificate types.
Table 15-11 Certificate Types and Predicate Expressions
End-entity certificate type
SSL client certificate
SSL server certificate
Object signing certificate
Certificate Manager signing certificate
Registration Manager signing certificate
OCSP responder certificate
Router certificate
Cross-signed certificate
. For a cross-signed certificate, the value is
cacert
The predicate value for CRL issuing points and
.
Type
certs
certs
certs
cacert
certs
certs
certs
certs
. For CRLs, specify
certs
.
Predicate
HTTP_PARAMS.certType==client
HTTP_PARAMS.certType==server
HTTP_PARAMS.certType==objSignClient
HTTP_PARAMS.certType==ca
HTTP_PARAMS.certType==ra
HTTP_PARAMS.certType==ocspResponder
HTTP_PARAMS.certType==CEP-Router
HTTP_PARAMS.certType==fbca
Rules
. For all other
xcert
.
crl
Chapter 15 Publishing 649