


File Formats                                       certificate(4)



NAME
     certificate - certificate object for SunScreen configuration

DESCRIPTION
     A certificate object is a mapping between  a  human-readable
     name  and a SKIP identity.  It is manipulated via the confi-
     guration editor or SunScreen administration GUI.

     There are two sub-types of certificates: SINGLE and GROUP.

     The SINGLE certificate represents a  single  SKIP  identity.
     It  has  an associated NSID (name space identifier) and MKID
     (master key id).  It has an optional G and P fields as  well
     a  a  KEY_LENGTH field.  These are not yet used, but will be
     used in a future SunScreen release  to  infer  the  best-fit
     pair  of  certificates to use for encrypted connections.  It
     also has an optional LOCAL field,  which  is  a  name  of  a
     Screen  object.  This is the SunScreen to which the certifi-
     cate is local.

     The GROUP certificate is a collection of other certificates,
     by name.

     All certificates may have an optional COMMENT field  associ-
     ated  with  them  which  is  a  256-character  or less user-
     provided comment.

     All  certificates  may  be  optionally  associated  with   a
     specific  SCREEN object.  If a certificate is so associated,
     its value will only be used on the Screen with which  it  is
     associated.

     A certificate's unique name which is its given name plus the
     name  of  the  Screen  if  it  is so associated.  "boss" and
     "boss" SCREEN "LA" are two examples  of  certificates  named
     "boss".

     All references to certificates  are  to  its  generic  name,
     without regard to any associated Screen.

SEE ALSO
     ssadm-edit(1M),   accessremote(4),    rule(4),    screen(4),
     vpngateway(4)












                  Last change: 31 January 2000                  1



