# $Id: d1b603c3.signing_policy.txt,v 1.1 2005/04/29 00:31:01 mrt Exp $
#
# ca-signing-policy.conf, see ca-signing-policy.doc for more information
#
# This is the configuration file describing the policy for what CAs are
# allowed to sign whoses certificates.
#
# This file is parsed from start to finish with a given CA and subject
# name.
# subject names may include the following wildcard characters:
#    *    Matches any number of characters.
#    ?    Matches any single character.
#
# CA names must be specified (no wildcards). Names containing whitespaces
# must be included in single quotes, e.g. 'Certification Authority'. 
# Names must not contain new line symbols. 
# The value of condition attribute is represented as a set of regular 
# expressions. Each regular expression must be included in double quotes.  
#
# This policy file dictates the following policy:
#
#  The ESnet root CA signs certificates of various entities.
#
# Format:
#------------------------------------------------------------------------
#  token type  | def.authority |                value              
#--------------|---------------|-----------------------------------------
# EACL entry #1|

 access_id_CA      X509         '/DC=net/DC=ES/O=ESnet/OU=Certificate Authorities/CN=ESnet Root CA 1'
 
 pos_rights        globus        CA:sign
 
 cond_subjects     globus     	'"/DC=org/DC=DOEGrids/OU=Certificate Authorities/*" "/DC=net/DC=ES/*" "/DC=org/DC=fusiongrid/OU=Certificate Authorities/*"'

#
# End DOE SG CA Policy
# 
# $Log: d1b603c3.signing_policy.txt,v $
# Revision 1.1  2005/04/29 00:31:01  mrt
# Removing the standard DOEGrids certs and signing policy, renamed the
# custom ESnet root CA signing policy with a .txt suffix.
#
# Revision 1.2  2004/11/05 23:12:24  mrt
# Better menus, new pages, etc
#
# Revision 1.1  2003/08/07 22:47:27  ckireyev
# initial add
#
# Revision 1.2  2003/05/27 16:29:35  helm
# Change statement of policy
#
# Revision 1.1  2003/05/22 22:38:22  helm
# *** empty log message ***
#
# Revision 1.4  2003/05/09 22:20:00  helm
# *** empty log message ***
#
# Revision 1.3  2003/05/03 01:31:42  dhiva
# Fixed the Subject Name of the ESnet Root CA
# Modified the access_id_CA and included /O=ESnet
#
# Revision 1.2  2003/05/03 01:18:09  dhiva
# $Id: d1b603c3.signing_policy.txt,v 1.1 2005/04/29 00:31:01 mrt Exp $ included for all these files
#
# Revision 1.1  2003/05/03 01:15:06  dhiva
# Globus Support Files for pki1.doegrids.org CA
#