Interface CfnCertificateAuthority.OcspConfigurationProperty
- All Superinterfaces:
software.amazon.jsii.JsiiSerializable
- All Known Implementing Classes:
CfnCertificateAuthority.OcspConfigurationProperty.Jsii$Proxy
- Enclosing class:
- CfnCertificateAuthority
@Stability(Stable)
public static interface CfnCertificateAuthority.OcspConfigurationProperty
extends software.amazon.jsii.JsiiSerializable
Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
Example:
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import software.amazon.awscdk.services.acmpca.*;
OcspConfigurationProperty ocspConfigurationProperty = OcspConfigurationProperty.builder()
.enabled(false)
.ocspCustomCname("ocspCustomCname")
.build();
-
Nested Class Summary
Nested ClassesModifier and TypeInterfaceDescriptionstatic final classA builder forCfnCertificateAuthority.OcspConfigurationPropertystatic final classAn implementation forCfnCertificateAuthority.OcspConfigurationProperty -
Method Summary
Modifier and TypeMethodDescriptionbuilder()default ObjectFlag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.default StringBy default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Method Details
-
getEnabled
Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status. -
getOcspCustomCname
By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.
The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".
-
builder
-