Class GenerateCertificateOptions


  • public class GenerateCertificateOptions
    extends Object
    Options for generating a certificate issued by the engine's CA.
    • Field Detail

      • subjectCommonName

        public String subjectCommonName
        Specifies Common Name (CN) of the certificate's subject.
      • subjectAlternativeNames

        public List<String> subjectAlternativeNames
        Specifies Subject Alternative Names.

        These can be host names or email addresses; they will be parsed into their respective fields.

      • excludeCommonNameFromSubjectAlternativeNames

        public Boolean excludeCommonNameFromSubjectAlternativeNames
        Flag determining if the Common Name (CN) of the subject will be included by default in the Subject Alternative Names of issued certificates.
      • ipSubjectAlternativeNames

        public List<String> ipSubjectAlternativeNames
        Specifies IP Subject Alternative Names.
      • uriSubjectAlternativeNames

        public List<String> uriSubjectAlternativeNames
        Specifies URI Subject Alternative Names.
      • otherSubjectAlternativeNames

        public List<String> otherSubjectAlternativeNames
        Specifies custom OID/UTF8-string Subject Alternative Names.

        The format is the same as OpenSSL: ;: where the only current valid type is UTF8. This can be a comma-delimited list or a JSON string slice. Must match allowed_other_sans specified on the role.

      • timeToLive

        public String timeToLive
        Specifies request time-to-live. If not specified, the role's TTL will be used.

        Value is specified as a string duration with time suffix. Hour is the largest supported suffix.

      • format

        public DataFormat format
        Specifies returned format of certificate & private key data. If unspecified it defaults to DataFormat.PEM
    • Constructor Detail

      • GenerateCertificateOptions

        public GenerateCertificateOptions()