Netscape NETSCAPE MANAGEMENT SYSTEM 6.01 - PLUG-IN Manuals

Table of Contents

3

About this Guide

11

Chapter 1 Authentication Plug-In Modules

17

Chapter 2 Job Plug-In Modules

63

Chapter 3 Constraints Policy Plug-In Modules

83

Overview of Constraints-Specific Policy Modules
84
Attributepresentconstraints Plug-In Module
86
- Configuration Parameters of Attributepresentconstraints
  87
Dsakeyconstraints Plug-In Module
91
- Configuration Parameters of Dsakeyconstraints
  92
- Dsakeyrule Rule
  94
Issuerconstraints Plug-In Module
94
- Configuration Parameters of Issuerconstraints
  95
- Issuerrule Rule
  96
Keyalgorithmconstraints Plug-In Module
97
- Configuration Parameters of Keyalgorithmconstraints
  97
- Keyalgrule Rule
  99
Renewalconstraints Plug-In Module
99
- Configuration Parameters of Renewalconstraints
  100
- Renewalconstraintsrule Rule
  101
Renewalvalidityconstraints Plug-In Module
102
- Configuration Parameters of Renewalvalidityconstraints
  103
- Defaultrenewalvalidityrule Rule
  105
Revocationconstraints Plug-In Module
106
- Configuration Parameters of Revocationconstraints
  106
- Revocationconstraintsrule Rule
  107
Rsakeyconstraints Plug-In Module
108
- Configuration Parameters of Rsakeyconstraints
  108
- Rsakeyrule Rule
  110
Signingalgorithmconstraints Plug-In Module
111
- Configuration Parameters of Signingalgorithmconstraints
  112
- Signingalgrule Rule
  114
Subcanameconstraints Plug-In Module
114
- Configuration Parameters of Subcanameconstraints
  115
- Subcanameconstraints Rule
  116
Uniquesubjectnameconstraints Plug-In Module
117
- Configuration Parameters of Uniquesubjectnameconstraints
  117
- Uniquesubjectnameconstraints Rule
  120
Validityconstraints Plug-In Module
120
- Configuration Parameters of Validityconstraints
  122
- Defaultvalidityrule Rule
  125

Chapter 4 Certificate Extension Plug-In Modules

127

Chapter 5 Mapper Plug-In Modules

247

Overview of Mapper Modules
248
Ldapcasimplemap Plug-In Module
250
- Configuration Parameters of Ldapcasimplemap
  252
- Ldapcacertmap Mapper
  254
- Ldapcrlmap Mapper
  254
Ldapdncompsmap Plug-In Module
254
- Configuration Parameters of Ldapdncompsmap
  257
Ldapdnexactmap Plug-In Module
260
- Configuration Parameters of Ldapdnexactmap
  260
Ldapsimplemap Plug-In Module
261
- Configuration Parameters of Ldapsimplemap
  262
- Ldapusercertmap Mapper
  263
Ldapsubjattrmap Plug-In Module
263
- Configuration Parameters of Ldapsubjattrmap
  264

Chapter 6 Publisher Plug-In Modules

267

Chapter 7 CRL Extension Plug-In Modules

279

Chapter 8 Log Plug-In Modules

297

Overview of Log Modules
297
File Plug-In Module
299
- Configuration Parameters of File
  300
- Audit Log Event Listener
  302
- Error Log Event Listener
  303
- System Log Event Listener
  304
Nteventlog Plug-In Module
304
- Configuration Parameters of Nteventlog
  305
- Ntaudit Event Listener
  307
- Ntsystem Event Listener
  307

Appendix A Distinguished Names

309

What Is a Distinguished Name
309
- Distinguished Name Components
  310
  - Root Distinguished Name
    311
  - Base Distinguished Name
    311
Dns in Certificate Management System
312
- Extending Attribute Support
  314
- Role of Distinguished Names in Certificates
  319
  - Dns in End-Entity Certificates
    320
  - Dns in CA Certificates
    320
  - Selecting Dns for Certificates
    321
  - DN Patterns and Certificate Subject Names
    321

Appendix B Object Identifiers

325

Appendix C Certificate and CRL Extensions

327

Introduction to Certificate Extensions
327
- Structure of Certificate Extensions
  330
- Sample Certificate Extensions
  331
Recommendations for Certificate Extension Use
331
Standard X.509 V3 Certificate Extensions
337
- Authorityinfoaccess
  339
- Authoritykeyidentifier
  340
- Basicconstraints
  341
- Certificatepolicies
  342
- Crldistributionpoints
  343
- Extkeyusage
  344
- Issueraltname
  347
- Keyusage
  348
- Nameconstraints
  350
- Ocspnocheck
  351
- Policyconstraints
  352
- Policymappings
  353
- Privatekeyusageperiod
  353
- Subjectaltname
  354
- Subjectdirectoryattributes
  356
- Subjectkeyidentifier
  356
Introduction to CRL Extensions
357
- Structure of CRL Extensions
  358
- Sample CRL and CRL Entry Extensions
  359
Standard X.509 V3 CRL Extensions
360
- Extensions for Crls
  360
  - Authoritykeyidentifier
    361
  - Crlnumber
    361
  - Deltacrlindicator
    362
  - Issueraltname
    363
  - Issuingdistributionpoint
    363
- CRL Entry Extensions
  364
  - Certificateissuer
    364
  - Holdinstructioncode
    365
  - Invaliditydate
    365
  - Reasoncode
    366
Netscape-Defined Certificate Extensions
366
- Netscape-Cert-Type
  367
- Netscape-Comment
  368
CA Certificates and Extension Interactions
368

Index

371

Netscape NETSCAPE MANAGEMENT SYSTEM 6.01 - PLUG-IN Manuals

Netscape NETSCAPE MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual (377 pages)

Table of Contents

About this Guide

Chapter 1 Authentication Plug-In Modules

Chapter 2 Job Plug-In Modules

Chapter 3 Constraints Policy Plug-In Modules

Chapter 4 Certificate Extension Plug-In Modules

Chapter 5 Mapper Plug-In Modules

Chapter 6 Publisher Plug-In Modules

Chapter 7 CRL Extension Plug-In Modules

Chapter 8 Log Plug-In Modules

Appendix A Distinguished Names

Appendix B Object Identifiers

Appendix C Certificate and CRL Extensions

Index

Related Products

Netscape Categories