Netscape NETSCAPE MANAGEMENT SYSTEM 4.5 - PLUG-IN Manuals

Table of Contents

3

About this Guide

11

Chapter 1 Authentication Plug-In Modules

19

Chapter 2 Job Plug-In Modules

65

Chapter 3 Constraints Policy Plug-In Modules

85

Overview of Constraints-Specific Policy Modules
86
Attributepresentconstraints Plug-In Module
88
- Configuration Parameters of Attributepresentconstraints
  89
Dsakeyconstraints Plug-In Module
93
- Configuration Parameters of Dsakeyconstraints
  94
- Dsakeyrule Rule
  96
Issuerconstraints Plug-In Module
96
- Configuration Parameters of Issuerconstraints
  97
- Issuerrule Rule
  98
Keyalgorithmconstraints Plug-In Module
99
- Configuration Parameters of Keyalgorithmconstraints
  99
- Keyalgrule Rule
  101
Renewalconstraints Plug-In Module
101
- Configuration Parameters of Renewalconstraints
  102
- Renewalconstraintsrule Rule
  103
Renewalvalidityconstraints Plug-In Module
104
- Configuration Parameters of Renewalvalidityconstraints
  105
- Defaultrenewalvalidityrule Rule
  107
Revocationconstraints Plug-In Module
108
- Configuration Parameters of Revocationconstraints
  108
- Revocationconstraintsrule Rule
  109
Rsakeyconstraints Plug-In Module
110
- Configuration Parameters of Rsakeyconstraints
  110
- Rsakeyrule Rule
  112
Signingalgorithmconstraints Plug-In Module
113
- Configuration Parameters of Signingalgorithmconstraints
  114
- Signingalgrule Rule
  116
Subcanameconstraints Plug-In Module
116
- Configuration Parameters of Subcanameconstraints
  117
- Subcanameconstraints Rule
  118
Uniquesubjectnameconstraints Plug-In Module
119
- Configuration Parameters of Uniquesubjectnameconstraints
  119
- Uniquesubjectnameconstraints Rule
  122
Validityconstraints Plug-In Module
122
- Configuration Parameters of Validityconstraints
  124
- Defaultvalidityrule Rule
  127

Chapter 4 Certificate Extension Plug-In Modules

129

Chapter 5 Mapper Plug-In Modules

249

Overview of Mapper Modules
250
Ldapcasimplemap Plug-In Module
253
- Configuration Parameters of Ldapcasimplemap
  254
- Ldapcacertmap Mapper
  256
- Ldapcrlmap Mapper
  257
Ldapdncompsmap Plug-In Module
257
- Configuration Parameters of Ldapdncompsmap
  260
Ldapdnexactmap Plug-In Module
262
- Configuration Parameters of Ldapdnexactmap
  263
Ldapsimplemap Plug-In Module
263
- Configuration Parameters of Ldapsimplemap
  264
- Ldapusercertmap Mapper
  265
Ldapsubjattrmap Plug-In Module
266
- Configuration Parameters of Ldapsubjattrmap
  266

Chapter 6 Publisher Plug-In Modules

269

Chapter 7 CRL Extension Plug-In Modules

281

Chapter 8 Log Plug-In Modules

299

Overview of Log Modules
299
File Plug-In Module
301
- Configuration Parameters of File
  302
- Audit Log Event Listener
  304
- Error Log Event Listener
  305
- System Log Event Listener
  306
Nteventlog Plug-In Module
306
- Configuration Parameters of Nteventlog
  307
- Ntaudit Event Listener
  309
- Ntsystem Event Listener
  309

Appendix A Distinguished Names

311

What Is a Distinguished Name
311
- Distinguished Name Components
  312
  - Root Distinguished Name
    313
  - Base Distinguished Name
    313
Dns in Certificate Management System
314
- Extending Attribute Support
  316
- Role of Distinguished Names in Certificates
  321
  - Dns in End-Entity Certificates
    322
  - Dns in CA Certificates
    322
  - Selecting Dns for Certificates
    323
  - DN Patterns and Certificate Subject Names
    323

Appendix B Object Identifiers

327

Appendix C Certificate and CRL Extensions

329

Introduction to Certificate Extensions
329
- Structure of Certificate Extensions
  332
- Sample Certificate Extensions
  333
Recommendations for Certificate Extension Use
333
Standard X.509 V3 Certificate Extensions
339
- Authorityinfoaccess
  341
- Authoritykeyidentifier
  342
- Basicconstraints
  343
- Certificatepolicies
  344
- Crldistributionpoints
  345
- Extkeyusage
  346
- Issueraltname
  348
- Keyusage
  349
- Nameconstraints
  352
- Ocspnocheck
  352
- Policyconstraints
  353
- Policymappings
  354
- Privatekeyusageperiod
  355
- Subjectaltname
  356
- Subjectdirectoryattributes
  357
- Subjectkeyidentifier
  358
Introduction to CRL Extensions
359
- Structure of CRL Extensions
  359
- Sample CRL and CRL Entry Extensions
  360
Standard X.509 V3 CRL Extensions
361
- Extensions for Crls
  361
  - Authoritykeyidentifier
    362
  - Crlnumber
    362
  - Deltacrlindicator
    363
  - Issueraltname
    363
  - Issuingdistributionpoint
    364
- CRL Entry Extensions
  364
  - Certificateissuer
    365
  - Holdinstructioncode
    365
  - Invaliditydate
    366
  - Reasoncode
    366
Netscape-Defined Certificate Extensions
367
- Netscape-Cert-Type
  367
- Netscape-Comment
  368
CA Certificates and Extension Interactions
368

Index

371

Netscape NETSCAPE MANAGEMENT SYSTEM 4.5 - PLUG-IN Manuals

Netscape NETSCAPE MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual (377 pages)

Table of Contents

About this Guide

Chapter 1 Authentication Plug-In Modules

Chapter 2 Job Plug-In Modules

Chapter 3 Constraints Policy Plug-In Modules

Chapter 4 Certificate Extension Plug-In Modules

Chapter 5 Mapper Plug-In Modules

Chapter 6 Publisher Plug-In Modules

Chapter 7 CRL Extension Plug-In Modules

Chapter 8 Log Plug-In Modules

Appendix A Distinguished Names

Appendix B Object Identifiers

Appendix C Certificate and CRL Extensions

Index

Related Products

Netscape Categories