Use this page to set the default values and restrictions for the RenewalRequestConstraint policy. This policy applies to client or server/sub ca certificate renewal requests and restricts whether expired certificates can be renewed. It can be applied to SSL users.
You can modify the following default values and restrictions for this policy:
|
Parameter |
Default Value |
Description |
|---|---|---|
|
Allow Renewal |
Checked (TRUE) |
Specifies whether certificates can be renewed. When it is checked (TRUE), certificates can be renewed. |
|
Days before expiration date |
15 days |
Specifies how many days before a certificate's expiration it can be renewed. If you specify 0 (zero), then certificates can not be renewed before their expiration date. If you specify * (asterisk), then certificates can be renewed anytime before their expiration date. |
|
Days after expiration date |
15 days |
Specifies how many days after a certificate's expiration it can be renewed. If you specify 0 (zero), then certificates can not be renewed after their expiration date. If you specify * (asterisk), then certificates can be renewed anytime after their expiration date. |
|
Duration of renewal (days) |
365 days |
Specifies how long renewed certificates are valid. |
Predicate expressions are optional, altering application of this policy when an incoming request matches a predicate expression specified here. A policy with no predicates applies to all incoming requests. For example, the following predicate expression specifies that all client renewal requests coming from the Acme Company marketing department that is located in Japan (ou=marketing,o=acme,c=japan)are subject to the parameter settings chosen for this predicate:
Type=="client" AND DN=="ou=marketing,o=acme,c=japan"
For detailed information about predicate expression syntax, see the Oracle Certificate Authority Administrator's Guide.
The buttons at the bottom of the page perform the functions described in the following table:
|
Button Name |
Function Description |
|---|---|
|
Revert |
Click this button to reset all changed parameters and predicates to their previous values. |
|
Apply |
Click this button to apply any changes made to this page. |
|
Cancel |
Click this button to cancel any changes made to this page and return to the main Policy page. |
|
OK |
Click this button to return to the main Policy page. Any changes made to this page are automatically saved. |