NAME

OpenXPKI::Server::Workflow::Validator::ValidCertificate

SYNOPSIS

validator: is_valid_pkcs10: class: OpenXPKI::Server::Workflow::Validator::ValidCertificate param: subject: CN=test.me,O=ACME,C=DE subject_key_identifier: 53:56:9A:FB:A3:4E:2A:4C:DF:52:8B:F8:A6:9F:30:6E:4A:49:45:C0 authority_key_identifier: 53:56:9A:FB:A3:4E:2A:4C:DF:52:8B:F8:A6:9F:30:6E:4A:49:45:C0 arg: - $pem

DESCRIPTION

Check the incoming data to be a valid (parseable) x509 certificate. Optionally check for certain properties.

Argument

$pem: The PEM formatted x509 certificate

Parameter

subject: A string or regex to check the subject against.
subject_key_identifier: A string to match the subject key identifier against
authority_key_identifier: A string to match the authority key identifier against
validate_chain: Boolean, if set to a true value the certificate chain must exist in the database. Extra certificates from the input data are used to build the intermediate chain.
external_root: Boolean, if true the chain is also valid if the root certificate is part of the input data. Implies validate_chain, also matches on self-signed certificates.