interface OcspConfigurationProperty
| Language | Type name |
|---|---|
 .NET | Amazon.CDK.Mixins.Preview.AWS.ACMPCA.Mixins.CfnCertificateAuthorityPropsMixin.OcspConfigurationProperty |
 Go | github.com/aws/aws-cdk-go/awscdkmixinspreview/v2/awsacmpca/mixins#CfnCertificateAuthorityPropsMixin_OcspConfigurationProperty |
 Java | software.amazon.awscdk.mixins.preview.services.acmpca.mixins.CfnCertificateAuthorityPropsMixin.OcspConfigurationProperty |
 Python | aws_cdk.mixins_preview.aws_acmpca.mixins.CfnCertificateAuthorityPropsMixin.OcspConfigurationProperty |
 TypeScript | @aws-cdk/mixins-preview » aws_acmpca » mixins » CfnCertificateAuthorityPropsMixin » OcspConfigurationProperty |
Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { mixins as acmpca_mixins } from '@aws-cdk/mixins-preview/aws-acmpca';
const ocspConfigurationProperty: acmpca_mixins.CfnCertificateAuthorityPropsMixin.OcspConfigurationProperty = {
enabled: false,
ocspCustomCname: 'ocspCustomCname',
};
Properties
| Name | Type | Description |
|---|---|---|
| enabled? | boolean | IResolvable | Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status. |
| ocsp | string | By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP). |
enabled?
Type:
boolean | IResolvable
(optional)
Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
ocspCustomCname?
Type:
string
(optional)
By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).
A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.
The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".