Interface CfnCertificateAuthority.OcspConfigurationProperty
- All Superinterfaces:
software.amazon.jsii.JsiiSerializable
- All Known Implementing Classes:
CfnCertificateAuthority.OcspConfigurationProperty.Jsii$Proxy
- Enclosing class:
- CfnCertificateAuthority
@Stability(Stable)
public static interface CfnCertificateAuthority.OcspConfigurationProperty
extends software.amazon.jsii.JsiiSerializable
Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
Example:
// The code below shows an example of how to instantiate this type. // The values are placeholders you should change. import software.amazon.awscdk.services.acmpca.*; OcspConfigurationProperty ocspConfigurationProperty = OcspConfigurationProperty.builder() .enabled(false) .ocspCustomCname("ocspCustomCname") .build();
-
Nested Class Summary
Modifier and TypeInterfaceDescriptionstatic final class
A builder forCfnCertificateAuthority.OcspConfigurationProperty
static final class
An implementation forCfnCertificateAuthority.OcspConfigurationProperty
-
Method Summary
Modifier and TypeMethodDescriptionbuilder()
default Object
Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.default String
By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).Methods inherited from interface software.amazon.jsii.JsiiSerializable
$jsii$toJson
-
Method Details
-
getEnabled
Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status. -
getOcspCustomCname
By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP).A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.
The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".
-
builder
-