Use this page to set the default values and restrictions for the RSAKeyConstraints policy. This policy specifies the minimum and maximum values for the length (in bits) of a public or private key. The drop-down lists show the selectable choices for certificate requests that do not meet any specified predicates. The corresponding limits for certificate requests that do meet a specified predicate are shown on the same line as that predicate.
Note: When enabled, the default values for this policy apply to all certificate requests from both clients and servers. To provide different limits for certificate requests from particular DNs or for particular certificate types or usages, use predicates as described in the following section.
You can modify the following default values and restrictions for this policy:
|
Parameter |
Default Value |
Description |
|---|---|---|
|
maxsize Default Value |
2048 |
Maximum key length. |
|
minsize Default Value |
1024 |
Minimum key length. Use this parameter to ensure a minimum level of security. |
Predicate expressions are optional, altering application of this policy when an incoming request matches a predicate expression. A policy with no predicates applies to all requests. For example, the following predicate expression requires that client SSL certificate requests use the key lengths specified with this predicate:
OCMCert.Type=="client" AND OCMCert.Usage=="ssl"
For detailed information about predicate expression syntax, see the Oracle Certificate Authority Administrator's Guide.
The buttons at the bottom of the page perform the functions described in the following table:
|
Button Name |
Function Description |
|---|---|
|
Reset |
Click this button to reset all changed parameters and predicates to their default values. |
|
Cancel |
Click this button to cancel any changes made to this page and return to the main Policy page. |
|
Apply |
Click this button to apply any changes made to this page. |
|
OK |
Click this button to return to the main Policy page. Any changes made to this page are automatically saved. |