public sealed class CaPool.Types.IssuancePolicy : IMessage<CaPool.Types.IssuancePolicy>, IEquatable<CaPool.Types.IssuancePolicy>, IDeepCloneable<CaPool.Types.IssuancePolicy>, IBufferMessage, IMessageReference documentation and code samples for the Certificate Authority v1 API class CaPool.Types.IssuancePolicy.
Defines controls over all certificate issuance within a [CaPool][google.cloud.security.privateca.v1.CaPool].
Implements
IMessageCaPoolTypesIssuancePolicy, IEquatableCaPoolTypesIssuancePolicy, IDeepCloneableCaPoolTypesIssuancePolicy, IBufferMessage, IMessageNamespace
Google.Cloud.Security.PrivateCA.V1Assembly
Google.Cloud.Security.PrivateCA.V1.dll
Constructors
IssuancePolicy()
public IssuancePolicy()IssuancePolicy(IssuancePolicy)
public IssuancePolicy(CaPool.Types.IssuancePolicy other)| Parameter | |
|---|---|
| Name | Description |
other |
CaPoolTypesIssuancePolicy |
Properties
AllowRequesterSpecifiedNotBeforeTime
public bool AllowRequesterSpecifiedNotBeforeTime { get; set; }Optional. If set to true, allows requesters to specify the [requested_not_before_time][google.cloud.security.privateca.v1.Certificate.requested_not_before_time] field when creating a [Certificate][google.cloud.security.privateca.v1.Certificate]. Certificates requested with this option enabled will have a 'not_before_time' equal to the value specified in the request. The 'not_after_time' will be adjusted to preserve the requested lifetime. The maximum time that a certificate can be backdated with these options is 48 hours in the past. This option cannot be set if [backdate_duration][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.backdate_duration] is set.
| Property Value | |
|---|---|
| Type | Description |
bool |
|
AllowedIssuanceModes
public CaPool.Types.IssuancePolicy.Types.IssuanceModes AllowedIssuanceModes { get; set; }Optional. If specified, then only methods allowed in the [IssuanceModes][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.IssuanceModes] may be used to issue [Certificates][google.cloud.security.privateca.v1.Certificate].
| Property Value | |
|---|---|
| Type | Description |
CaPoolTypesIssuancePolicyTypesIssuanceModes |
|
AllowedKeyTypes
public RepeatedField<CaPool.Types.IssuancePolicy.Types.AllowedKeyType> AllowedKeyTypes { get; }Optional. If any [AllowedKeyType][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.AllowedKeyType] is specified, then the certificate request's public key must match one of the key types listed here. Otherwise, any key may be used.
| Property Value | |
|---|---|
| Type | Description |
RepeatedFieldCaPoolTypesIssuancePolicyTypesAllowedKeyType |
|
BackdateDuration
public Duration BackdateDuration { get; set; }Optional. If set, all certificates issued from this [CaPool][google.cloud.security.privateca.v1.CaPool] will be backdated by this duration. The 'not_before_time' will be the issuance time minus this [backdate_duration][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.backdate_duration], and the 'not_after_time' will be adjusted to preserve the requested lifetime. The maximum duration that a certificate can be backdated with these options is 48 hours in the past. This option cannot be set if [allow_requester_specified_not_before_time][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.allow_requester_specified_not_before_time] is set.
| Property Value | |
|---|---|
| Type | Description |
Duration |
|
BaselineValues
public X509Parameters BaselineValues { get; set; }Optional. A set of X.509 values that will be applied to all certificates issued through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a certificate request includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate request uses a [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate] that defines conflicting [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values] for the same properties, the certificate issuance request will fail.
| Property Value | |
|---|---|
| Type | Description |
X509Parameters |
|
IdentityConstraints
public CertificateIdentityConstraints IdentityConstraints { get; set; }Optional. Describes constraints on identities that may appear in [Certificates][google.cloud.security.privateca.v1.Certificate] issued through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If this is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool] will not add restrictions on a certificate's identity.
| Property Value | |
|---|---|
| Type | Description |
CertificateIdentityConstraints |
|
MaximumLifetime
public Duration MaximumLifetime { get; set; }Optional. The maximum lifetime allowed for issued [Certificates][google.cloud.security.privateca.v1.Certificate]. Note that if the issuing [CertificateAuthority][google.cloud.security.privateca.v1.CertificateAuthority] expires before a [Certificate][google.cloud.security.privateca.v1.Certificate] resource's requested maximum_lifetime, the effective lifetime will be explicitly truncated to match it.
| Property Value | |
|---|---|
| Type | Description |
Duration |
|
PassthroughExtensions
public CertificateExtensionConstraints PassthroughExtensions { get; set; }Optional. Describes the set of X.509 extensions that may appear in a [Certificate][google.cloud.security.privateca.v1.Certificate] issued through this [CaPool][google.cloud.security.privateca.v1.CaPool]. If a certificate request sets extensions that don't appear in the [passthrough_extensions][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.passthrough_extensions], those extensions will be dropped. If a certificate request uses a [CertificateTemplate][google.cloud.security.privateca.v1.CertificateTemplate] with [predefined_values][google.cloud.security.privateca.v1.CertificateTemplate.predefined_values] that don't appear here, the certificate issuance request will fail. If this is omitted, then this [CaPool][google.cloud.security.privateca.v1.CaPool] will not add restrictions on a certificate's X.509 extensions. These constraints do not apply to X.509 extensions set in this [CaPool][google.cloud.security.privateca.v1.CaPool]'s [baseline_values][google.cloud.security.privateca.v1.CaPool.IssuancePolicy.baseline_values].
| Property Value | |
|---|---|
| Type | Description |
CertificateExtensionConstraints |
|