NAME

OpenXPKI::Server::Workflow::Activity::CSR::CheckPolicyDNS

DESCRIPTION

Check if the subjects common name and items of type DNS in the subject alternative name section can be resolved by DNS. The validation result is written into the context key check_policy_dns as array, each failed item as one line. Empty/Non-Existing if all checks are ok.

Configuration Parameters

check_cn: Check the value of the CN component of the subject. Possible values are * "A" (item is an a-record) * "C" (item is a C-Name) * "AC" (both types are ok)
check_san: Check subject alternative name section, same values as check_cn.
timeout: The timeout (per query) in seconds, default is 10 seconds.
servers: comma seperated list of nameserver addresses. Default is to use system settings.