Class: AWSCDK::ACMPCA::CfnCertificateAuthority::OcspConfigurationProperty

Inherits:

Jsii::Struct

• Object
• Jsii::Struct
• AWSCDK::ACMPCA::CfnCertificateAuthority::OcspConfigurationProperty

Defined in:

acmpca/cfn_certificate_authority.rb

Overview

Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-ocspconfiguration.html

Instance Attribute Summary

• #enabled ⇒ Boolean, AWSCDK::IResolvable readonly

  Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.

• #ocsp_custom_cname ⇒ String^? readonly

  By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).

Class Method Summary

• .jsii_properties ⇒ Object

Instance Method Summary

• #initialize(enabled:, ocsp_custom_cname: nil) ⇒ OcspConfigurationProperty constructor

  A new instance of OcspConfigurationProperty.

• #to_jsii ⇒ Object

Constructor Details

#initialize(enabled:, ocsp_custom_cname: nil) ⇒ OcspConfigurationProperty

Returns a new instance of OcspConfigurationProperty.

Parameters:

• enabled (Boolean, AWSCDK::IResolvable) —

  Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.

• ocsp_custom_cname (String, nil) (defaults to: nil) —

  By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).

# File 'acmpca/cfn_certificate_authority.rb', line 1292

def initialize(enabled:, ocsp_custom_cname: nil)
  @enabled = enabled
  Jsii::Type.check_type(@enabled, JSON.parse(Base64.strict_decode64("eyJ1bmlvbiI6eyJ0eXBlcyI6W3sicHJpbWl0aXZlIjoiYm9vbGVhbiJ9LHsiZnFuIjoiYXdzLWNkay1saWIuSVJlc29sdmFibGUifV19fQ==")), "enabled")
  @ocsp_custom_cname = ocsp_custom_cname
  Jsii::Type.check_type(@ocsp_custom_cname, JSON.parse(Base64.strict_decode64("eyJwcmltaXRpdmUiOiJzdHJpbmcifQ==")), "ocspCustomCname") unless @ocsp_custom_cname.nil?
end

Instance Attribute Details

#enabled ⇒ Boolean, AWSCDK::IResolvable (readonly)

Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.

Returns:

• (Boolean, AWSCDK::IResolvable)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-ocspconfiguration.html#cfn-acmpca-certificateauthority-ocspconfiguration-enabled

# File 'acmpca/cfn_certificate_authority.rb', line 1303

def enabled
  @enabled
end

#ocsp_custom_cname ⇒ String^? (readonly)

By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).

A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.

The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".

Returns:

• (String, nil)

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-acmpca-certificateauthority-ocspconfiguration.html#cfn-acmpca-certificateauthority-ocspconfiguration-ocspcustomcname

# File 'acmpca/cfn_certificate_authority.rb', line 1312

def ocsp_custom_cname
  @ocsp_custom_cname
end

Class Method Details

.jsii_properties ⇒ Object

# File 'acmpca/cfn_certificate_authority.rb', line 1314

def self.jsii_properties
  {
    :enabled => "enabled",
    :ocsp_custom_cname => "ocspCustomCname",
  }
end

Instance Method Details

#to_jsii ⇒ Object

# File 'acmpca/cfn_certificate_authority.rb', line 1321

def to_jsii
  result = {}
  result.merge!({
    "enabled" => @enabled,
    "ocspCustomCname" => @ocsp_custom_cname,
  })
  result.compact
end