IssuancePolicy class

Defines controls over all certificate issuance within a CaPool.

Constructors

IssuancePolicy({Input<IssuanceModes>? allowedIssuanceModes, Input<List<AllowedKeyType>>? allowedKeyTypes, Input<X509Parameters>? baselineValues, Input<CertificateIdentityConstraints>? identityConstraints, Input<String>? maximumLifetime, Input<CertificateExtensionConstraints>? passthroughExtensions})
Creates a new IssuancePolicy. allowedIssuanceModes Optional. If specified, then only methods allowed in the IssuanceModes may be used to issue Certificates. allowedKeyTypes Optional. If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here. Otherwise, any key may be used. baselineValues Optional. A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate request uses a CertificateTemplate that defines conflicting predefined_values for the same properties, the certificate issuance request will fail. identityConstraints Optional. Describes constraints on identities that may appear in Certificates issued through this CaPool. If this is omitted, then this CaPool will not add restrictions on a certificate's identity. maximumLifetime Optional. The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it. passthroughExtensions Optional. Describes the set of X.509 extensions that may appear in a Certificate issued through this CaPool. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If a certificate request uses a CertificateTemplate with predefined_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this CaPool will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CaPool's baseline_values.
const
IssuancePolicy.fromMap(Map<String, dynamic> map)
factory

Properties

allowedIssuanceModes → Input<IssuanceModes>?
Optional. If specified, then only methods allowed in the IssuanceModes may be used to issue Certificates.
final
allowedKeyTypes → Input<List<AllowedKeyType>>?
Optional. If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here. Otherwise, any key may be used.
final
baselineValues → Input<X509Parameters>?
Optional. A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate request uses a CertificateTemplate that defines conflicting predefined_values for the same properties, the certificate issuance request will fail.
final
hashCode → int
The hash code for this object.
no setterinherited
identityConstraints → Input<CertificateIdentityConstraints>?
Optional. Describes constraints on identities that may appear in Certificates issued through this CaPool. If this is omitted, then this CaPool will not add restrictions on a certificate's identity.
final
maximumLifetime → Input<String>?
Optional. The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority expires before a Certificate's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it.
final
passthroughExtensions → Input<CertificateExtensionConstraints>?
Optional. Describes the set of X.509 extensions that may appear in a Certificate issued through this CaPool. If a certificate request sets extensions that don't appear in the passthrough_extensions, those extensions will be dropped. If a certificate request uses a CertificateTemplate with predefined_values that don't appear here, the certificate issuance request will fail. If this is omitted, then this CaPool will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this CaPool's baseline_values.
final
runtimeType → Type
A representation of the runtime type of the object.
no setterinherited

Methods

noSuchMethod(Invocation invocation) → dynamic
Invoked when a nonexistent method or property is accessed.
inherited
toMap() → Map<String, dynamic>
toString() → String
A string representation of this object.
inherited

Operators

operator ==(Object other) → bool
The equality operator.
inherited