load_extension

Load data from the extensions section

• PROFILE (certificates only)

  Name of the profile to get the extension from.

• CA (crl only)

  Name of the CA to get the extension from.

• EXT

  Name of the extension to load.

generate_oid_extension_section

Wrapper around set_extension to prepare oid extensions with sequence

create_random_serial

Generate a random serial number (ID) and return it as a Math::BigInt object.

Parameters

PREFIX - High order bits to prepend to the generated serial number (optional)

RANDOM_LENGTH - The desired byte length of the random part

process_templates

Helper method to parse profile items through template toolkit. Expects an array of strings containing one TT Template per line. Available variables for substitution are

ISSUER.x Hash with the subject parts of the issuing certificate.

Note that each key is an array itself, even if there is only a single value in it. Therefore you need to write e.g. ISSUER.OU.0 for the (first) OU entry. Its wise to do urlescaping on the output, e.g. [- ISSUER.OU.0 | uri -].

The hash also has ISSUER.DN set with the full dn.

CAALIAS Hash holding information about the used ca token.

Offers the keys ALIAS, GROUP, GENERATION as given in the alias table.

PKI_REALM

The internal name of the realm (e.g. "democa").