NAME

OpenXPKI::Server::Workflow::Condition::IsWrappedRequest

DESCRIPTION

This condition checks whether a given PEM formatted certificate PKCS10 inside a PKCS7 container or a "plain" PKCS10 structure.

The condition neither checks the signature on the PKCS10 container nor the signature of the outer PKCS7 structure and also does not check any relation between the PKCS7 and the PKCS10.

The condition is true, if the given PEM data is a PKCS7 SignedData with a payload that can be parsed as PKCS10 container. It is false if the data can be parsed as PKCS10 request directly.

The conditions throws a configuration error if it is not able to find a parsable PKCS10 container.