PolicyStatementExtension OID Limitations

-

hi

hopefully quick question on use of oid's in ca hierachy (2008 r2)...

it understanding r2 if specify oid cps, 1.3.6.1.4.1.xxxxx.509.1 in policystatementextension of ca, sub ca can have either 1.3.6.1.4.1.xxxxx.509.1 or 1.3.6.1.4.1.xxxxx.509.1.a.b defined in it's policystatementextension (ie parent oid or sub oid's of it). example 1.3.6.1.4.1.xxxxx.509.2 not work. think i've seen thread explained that this is new r2.

first question - understanding correct?

second question assuming correct - oid specified impose similar restriction on specific issuance policies defined in certificate templates?

the answers design of oid arc. of common practices i've seen oid arc's use cps's & cp's may need reworked depending on answers.

thanks

douks

1) yes.

2) yes.

my weblog: http://en-us.sysadmins.lv
powershell pki module: http://pspki.codeplex.com
windows pki reference: on technet wiki



Windows Server  >  Security



Comments

Post a Comment

Popular posts from this blog

more indexes

-
i want 2 indexes. likes can't mssql. i have example fields: school class number i want school , class in index can this: school class number 1 2 435 1 4 4535 1 5 265 2 1 8234 2 2 8493 4 3 943 4 2 493 4 6 934 but how can in sql server management studio i declare unique constraint. borrowing segio's ddl: create table dbo.orderrows ( id int identity (1, 1) not null primary key ,ordernr varchar (20) not null ,orderrow varchar (20) not null ,rowtotal decimal (11, 3) default 0 not null , constraint uq_orderrows unique (ordernr, orderrow) ); above under hood create unique index on column combination (ordernr, orderrow). tibor karaszi, sql server mvp | web | blog SQL Server  >  ...
Read more

ActiveDirectory

-
hello togehter, is possible disable bloody warning?: event id: 2887 event source: activedirectory_domainservice event type: warning event description: during previous 24 hour period clients attempted perform ldap binds either: (1) sasl (negotiate kerberos ntlm or digest) ldap bind did not request signing (integrity validation) or (2) ldap simple bind performed on cleartext (non-ssl/tls-encrypted) connection directory server not configured reject such binds.  the security of directory server can enhanced configuring server reject such binds.  for more details , information on how make configuration change server please see http://go.microsoft.com/fwlink/linkid=87923. summary information on number of these binds received within past 24 hours below. can enable additional logging log event each time client makes such bind including information on client made bind.  to please raise setting "ldap interface events" even...
Read more

Virtual Channel

-
on condition rdp decide protocoll extension necessary? use standard gdi , if there movie playing, switch dynamically window ms-rdpev video transfering? or full session send on additional ms-rdpev. , in cases host rendering , in case client rendering? thanks in advance! hi, the remote desktop protocol video redirection virtual channel extension used redirect audio/video streams terminal server terminal client . protocol specifies communication between application playing audio/video on terminal server , terminal client. regards, wilson jia this posting provided "as is" no warranties, , confers no rights. please remember click “mark answer” on post helps you, , click “unmark answer” if marked post not answer question. can beneficial other community members reading thread. ” Windows Server  >  ...
Read more