NAME

OpenXPKI::Server::Workflow::Condition::CertificateIsLocalEntity

DESCRIPTION

The condition checks if the certificate identified by cert_identifier is an entity in the given realm.

Configuration

    is_local_entity:
        class: OpenXPKI::Server::Workflow::Condition::CertificateIsLocalEntity
        param:
          expected_profile: tls-server

Parameters

expected_profile
cert_identifier: The certificate to check, if not present as explicit parameter the context value with same key will be used.
pki_realm: Optional, the default is to check the entity against the current realm, can be another realm name or _any to accept entities from all realms.
empty_ok: Boolean, if true the condition will silently be false if cert_identifier is not set. If not set, a configuration_error is thrown.