Class: Google::Apis::PrivatecaV1::IssuancePolicy

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/privateca_v1/classes.rb,
lib/google/apis/privateca_v1/representations.rb,
lib/google/apis/privateca_v1/representations.rb

Overview

Defines controls over all certificate issuance within a CaPool.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ IssuancePolicy

Returns a new instance of IssuancePolicy.



1491
1492
1493
# File 'lib/google/apis/privateca_v1/classes.rb', line 1491

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#allowed_issuance_modesGoogle::Apis::PrivatecaV1::IssuanceModes

IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool. Corresponds to the JSON property allowedIssuanceModes



1446
1447
1448
# File 'lib/google/apis/privateca_v1/classes.rb', line 1446

def allowed_issuance_modes
  @allowed_issuance_modes
end

#allowed_key_typesArray<Google::Apis::PrivatecaV1::AllowedKeyType>

Optional. If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here. Otherwise, any key may be used. Corresponds to the JSON property allowedKeyTypes



1453
1454
1455
# File 'lib/google/apis/privateca_v1/classes.rb', line 1453

def allowed_key_types
  @allowed_key_types
end

#backdate_durationString

Optional. The duration to backdate all certificates issued from this CaPool. If not set, the certificates will be issued with a not_before_time of the issuance time (i.e. the current time). If set, the certificates will be issued with a not_before_time of the issuance time minus the backdate_duration. The not_after_time will be adjusted to preserve the requested lifetime. The backdate_duration must be less than or equal to 48 hours. Corresponds to the JSON property backdateDuration

Returns:

  • (String)


1463
1464
1465
# File 'lib/google/apis/privateca_v1/classes.rb', line 1463

def backdate_duration
  @backdate_duration
end

#baseline_valuesGoogle::Apis::PrivatecaV1::X509Parameters

An X509Parameters is used to describe certain fields of an X.509 certificate, such as the key usage fields, fields specific to CA certificates, certificate policy extensions and custom extensions. Corresponds to the JSON property baselineValues



1470
1471
1472
# File 'lib/google/apis/privateca_v1/classes.rb', line 1470

def baseline_values
  @baseline_values
end

#identity_constraintsGoogle::Apis::PrivatecaV1::CertificateIdentityConstraints

Describes constraints on a Certificate's Subject and SubjectAltNames. Corresponds to the JSON property identityConstraints



1475
1476
1477
# File 'lib/google/apis/privateca_v1/classes.rb', line 1475

def identity_constraints
  @identity_constraints
end

#maximum_lifetimeString

Optional. The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate resource's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it. Corresponds to the JSON property maximumLifetime

Returns:

  • (String)


1483
1484
1485
# File 'lib/google/apis/privateca_v1/classes.rb', line 1483

def maximum_lifetime
  @maximum_lifetime
end

#passthrough_extensionsGoogle::Apis::PrivatecaV1::CertificateExtensionConstraints

Describes a set of X.509 extensions that may be part of some certificate issuance controls. Corresponds to the JSON property passthroughExtensions



1489
1490
1491
# File 'lib/google/apis/privateca_v1/classes.rb', line 1489

def passthrough_extensions
  @passthrough_extensions
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



1496
1497
1498
1499
1500
1501
1502
1503
1504
# File 'lib/google/apis/privateca_v1/classes.rb', line 1496

def update!(**args)
  @allowed_issuance_modes = args[:allowed_issuance_modes] if args.key?(:allowed_issuance_modes)
  @allowed_key_types = args[:allowed_key_types] if args.key?(:allowed_key_types)
  @backdate_duration = args[:backdate_duration] if args.key?(:backdate_duration)
  @baseline_values = args[:baseline_values] if args.key?(:baseline_values)
  @identity_constraints = args[:identity_constraints] if args.key?(:identity_constraints)
  @maximum_lifetime = args[:maximum_lifetime] if args.key?(:maximum_lifetime)
  @passthrough_extensions = args[:passthrough_extensions] if args.key?(:passthrough_extensions)
end