Name

OpenXPKI::Server::Workflow::Activity::Tools::BuildPKCS7CertList

Description

Convert a list of certificates into a PKCS7 certificates-only structure.

Certificates can be given directly as PEM blocks or as a list of cert_identifiers. The order of the given lists is preserved, if both parameters are set the PEM blocks will be added to the list first.

Configuration

Activity parameters

certificate: A list of PEM blocks to be contained in the PKCS7 structure. can be either an array of strings holding the individual PEM blocks or a single string with the PEM blocks concatenated.
cert_identifier_list: The list of certificate identifiers to be contained in the PKCS7 structure.
format, optional

PEM: Export the PKCS7 structure in PEM encoding to the given target_key
DER: Export the PKCS7 structure as binary data (DER) to the given target_key. Do not export binary data to non-volatile context keys!

target_key, optional: The context key to write the result to, default is certificate_export. Note: If you export a key and use a persisted workflow, this will leave the (password protected) key readable in the context forever.
base64, optional: Boolean, if set the output is wrapped by a base64 encoding to avoid raw binary data in context. Only available with format DER or PKCS7DER. Ineffective when a template is set, use the template definition instead.
keep_duplicates, optional: Boolean, while the order of certificates in the input is preserved, any duplicates found will be removed from the list after their first occurence. If you set this to true, duplicates will appear repeatedly in the output structure.