CertificateIssuerValve
Valve for issuing X.509 certificates.
The issued certificate will be added to item property ‘dest’ in PEM format.
Requires a configured CA.
Properties
Example Configuration
{
"name": "CertificateIssuerValve",
"enabled": "true",
"config": {
"dest": "certificate",
"cert_subject_dn": "CN={{request.uid}}",
"cert_subject_key": "{{item.public_key}}",
"ca_ref": "6f9debd0-a9c0-4fcc-a364-c6c9b8fb8257",
"cert_serial_number": "{{request.serial_number}}",
"cert_ocsp_url":"https://ocsp.company.org",
"cert_not_before": "{{request.not_before}}",
"cert_not_after": "{{request.not_after}}",
"cert_key_usage": "true,false,true",
"cert_ext_key_usage": "clientAuth"
}
}