Skip to content

/AWS1/CL_ACPREVOCATIONCONF

Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions. Your private certificate authority (CA) can configure Online Certificate Status Protocol (OCSP) support and/or maintain a certificate revocation list (CRL). OCSP returns validation information about certificates as requested by clients, and a CRL contains an updated list of certificates revoked by your CA. For more information, see RevokeCertificate and Setting up a certificate revocation method in the Amazon Web Services Private Certificate Authority User Guide.

CONSTRUCTOR

IMPORTING

Optional arguments:

io_crlconfiguration TYPE REF TO /AWS1/CL_ACPCRLCONFIGURATION /AWS1/CL_ACPCRLCONFIGURATION

Configuration of the certificate revocation list (CRL), if any, maintained by your private CA. A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts every 15 minutes.

io_ocspconfiguration TYPE REF TO /AWS1/CL_ACPOCSPCONFIGURATION /AWS1/CL_ACPOCSPCONFIGURATION

Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA. When you revoke a certificate, OCSP responses may take up to 60 minutes to reflect the new status.

Queryable Attributes

CrlConfiguration

Configuration of the certificate revocation list (CRL), if any, maintained by your private CA. A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts every 15 minutes.

Accessible with the following methods

Method Description
GET_CRLCONFIGURATION() Getter for CRLCONFIGURATION

OcspConfiguration

Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA. When you revoke a certificate, OCSP responses may take up to 60 minutes to reflect the new status.

Accessible with the following methods

Method Description
GET_OCSPCONFIGURATION() Getter for OCSPCONFIGURATION