Class: Google::Apis::PrivatecaV1::IssuancePolicy
- Inherits:
-
Object
- Object
- Google::Apis::PrivatecaV1::IssuancePolicy
- Includes:
- Core::Hashable, Core::JsonObjectSupport
- Defined in:
- lib/google/apis/privateca_v1/classes.rb,
lib/google/apis/privateca_v1/representations.rb,
lib/google/apis/privateca_v1/representations.rb
Overview
Defines controls over all certificate issuance within a CaPool.
Instance Attribute Summary collapse
-
#allowed_issuance_modes ⇒ Google::Apis::PrivatecaV1::IssuanceModes
IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool.
-
#allowed_key_types ⇒ Array<Google::Apis::PrivatecaV1::AllowedKeyType>
Optional.
-
#backdate_duration ⇒ String
Optional.
-
#baseline_values ⇒ Google::Apis::PrivatecaV1::X509Parameters
An X509Parameters is used to describe certain fields of an X.509 certificate, such as the key usage fields, fields specific to CA certificates, certificate policy extensions and custom extensions.
-
#identity_constraints ⇒ Google::Apis::PrivatecaV1::CertificateIdentityConstraints
Describes constraints on a Certificate's Subject and SubjectAltNames.
-
#maximum_lifetime ⇒ String
Optional.
-
#passthrough_extensions ⇒ Google::Apis::PrivatecaV1::CertificateExtensionConstraints
Describes a set of X.509 extensions that may be part of some certificate issuance controls.
Instance Method Summary collapse
-
#initialize(**args) ⇒ IssuancePolicy
constructor
A new instance of IssuancePolicy.
-
#update!(**args) ⇒ Object
Update properties of this object.
Constructor Details
#initialize(**args) ⇒ IssuancePolicy
Returns a new instance of IssuancePolicy.
1491 1492 1493 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1491 def initialize(**args) update!(**args) end |
Instance Attribute Details
#allowed_issuance_modes ⇒ Google::Apis::PrivatecaV1::IssuanceModes
IssuanceModes specifies the allowed ways in which Certificates may be
requested from this CaPool.
Corresponds to the JSON property allowedIssuanceModes
1446 1447 1448 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1446 def allowed_issuance_modes @allowed_issuance_modes end |
#allowed_key_types ⇒ Array<Google::Apis::PrivatecaV1::AllowedKeyType>
Optional. If any AllowedKeyType is specified, then the certificate request's
public key must match one of the key types listed here. Otherwise, any key may
be used.
Corresponds to the JSON property allowedKeyTypes
1453 1454 1455 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1453 def allowed_key_types @allowed_key_types end |
#backdate_duration ⇒ String
Optional. The duration to backdate all certificates issued from this CaPool.
If not set, the certificates will be issued with a not_before_time of the
issuance time (i.e. the current time). If set, the certificates will be issued
with a not_before_time of the issuance time minus the backdate_duration. The
not_after_time will be adjusted to preserve the requested lifetime. The
backdate_duration must be less than or equal to 48 hours.
Corresponds to the JSON property backdateDuration
1463 1464 1465 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1463 def backdate_duration @backdate_duration end |
#baseline_values ⇒ Google::Apis::PrivatecaV1::X509Parameters
An X509Parameters is used to describe certain fields of an X.509 certificate,
such as the key usage fields, fields specific to CA certificates, certificate
policy extensions and custom extensions.
Corresponds to the JSON property baselineValues
1470 1471 1472 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1470 def baseline_values @baseline_values end |
#identity_constraints ⇒ Google::Apis::PrivatecaV1::CertificateIdentityConstraints
Describes constraints on a Certificate's Subject and SubjectAltNames.
Corresponds to the JSON property identityConstraints
1475 1476 1477 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1475 def identity_constraints @identity_constraints end |
#maximum_lifetime ⇒ String
Optional. The maximum lifetime allowed for issued Certificates. Note that if
the issuing CertificateAuthority expires before a Certificate resource's
requested maximum_lifetime, the effective lifetime will be explicitly
truncated to match it.
Corresponds to the JSON property maximumLifetime
1483 1484 1485 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1483 def maximum_lifetime @maximum_lifetime end |
#passthrough_extensions ⇒ Google::Apis::PrivatecaV1::CertificateExtensionConstraints
Describes a set of X.509 extensions that may be part of some certificate
issuance controls.
Corresponds to the JSON property passthroughExtensions
1489 1490 1491 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1489 def passthrough_extensions @passthrough_extensions end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
1496 1497 1498 1499 1500 1501 1502 1503 1504 |
# File 'lib/google/apis/privateca_v1/classes.rb', line 1496 def update!(**args) @allowed_issuance_modes = args[:allowed_issuance_modes] if args.key?(:allowed_issuance_modes) @allowed_key_types = args[:allowed_key_types] if args.key?(:allowed_key_types) @backdate_duration = args[:backdate_duration] if args.key?(:backdate_duration) @baseline_values = args[:baseline_values] if args.key?(:baseline_values) @identity_constraints = args[:identity_constraints] if args.key?(:identity_constraints) @maximum_lifetime = args[:maximum_lifetime] if args.key?(:maximum_lifetime) @passthrough_extensions = args[:passthrough_extensions] if args.key?(:passthrough_extensions) end |