NAME

OpenXPKI::Server::Workflow::Condition::KeyGenerationMode

DESCRIPTION

Check if the profile allows key generation as specified by the key.generate parameter. If the profile itself does not have such a section, the profile default settings are checked. If neither one exists, the existence of key.alg is checked.

Configuration

Example:

    can_use_server_key:
        class: OpenXPKI::Server::Workflow::Condition::KeyGenerationMode
        param:
            generate: server
            _map_profile: $cert_profile

Parameters

generate: The generation mode that should be checked
profile: The name of the profile to check, if not set the context value of cert_profile is used.

Rules

server: Returns true if the mode is not client.
client: Returns true if the mode is either client or both.
escrow: Returns true if the mode is escrow.