NAME

OpenXPKI::Server::Workflow::Condition::SubjectValid

DESCRIPTION

Subject can be set via param cert_subject, if unset its read from the context value cert_subject.

Check if the subject has no empty RDNs and if the RDN components do not exceed the the length limits. Length check is done on CN/OU/O (64), L/ST (128), C (2). You can add extra checks by adding a parameter with the RDN name as key, e.g.

  class: OpenXPKI::Server::Workflow::Condition::SubjectValid
  param:
      DC=256

To check any rdn for "DC" to be no larger than 256 chars.