Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Documentation

data OcspConfiguration

Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.

When you revoke a certificate, OCSP responses may take up to 60 minutes to reflect the new status.

See: newOcspConfiguration smart constructor.

Constructors

OcspConfiguration'

Fields

• ocspCustomCname :: Maybe Text

  By default, Amazon Web Services Private CA injects an Amazon Web Services domain into certificates being validated by the Online Certificate Status Protocol (OCSP). A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.

  The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".

  For more information, see Customizing Online Certificate Status Protocol (OCSP) in the Amazon Web Services Private Certificate Authority User Guide.

• enabled :: Bool

  Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.

Instances

FromJSON OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Methods

parseJSON :: Value -> Parser OcspConfiguration

parseJSONList :: Value -> Parser [OcspConfiguration]

ToJSON OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Methods

toJSON :: OcspConfiguration -> Value

toEncoding :: OcspConfiguration -> Encoding

toJSONList :: [OcspConfiguration] -> Value

toEncodingList :: [OcspConfiguration] -> Encoding

Generic OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Associated Types

type Rep OcspConfiguration :: Type -> Type

Methods

from :: OcspConfiguration -> Rep OcspConfiguration x

to :: Rep OcspConfiguration x -> OcspConfiguration

Read OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Methods

readsPrec :: Int -> ReadS OcspConfiguration

readList :: ReadS [OcspConfiguration]

readPrec :: ReadPrec OcspConfiguration

readListPrec :: ReadPrec [OcspConfiguration]

Show OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Methods

showsPrec :: Int -> OcspConfiguration -> ShowS

show :: OcspConfiguration -> String

showList :: [OcspConfiguration] -> ShowS

NFData OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Methods

rnf :: OcspConfiguration -> ()

Eq OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Methods

(==) :: OcspConfiguration -> OcspConfiguration -> Bool

(/=) :: OcspConfiguration -> OcspConfiguration -> Bool

Hashable OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

Methods

hashWithSalt :: Int -> OcspConfiguration -> Int

hash :: OcspConfiguration -> Int

type Rep OcspConfiguration

Defined in Amazonka.CertificateManagerPCA.Types.OcspConfiguration

type Rep OcspConfiguration = D1 ('MetaData "OcspConfiguration" "Amazonka.CertificateManagerPCA.Types.OcspConfiguration" "amazonka-certificatemanager-pca-2.0-BrCc8DEClV63rMSVXz2XYH" 'False) (C1 ('MetaCons "OcspConfiguration'" 'PrefixI 'True) (S1 ('MetaSel ('Just "ocspCustomCname") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "enabled") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Bool)))

newOcspConfiguration

Arguments

:: Bool

$sel:enabled:OcspConfiguration'

-> OcspConfiguration

Create a value of OcspConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:ocspCustomCname:OcspConfiguration', ocspConfiguration_ocspCustomCname - By default, Amazon Web Services Private CA injects an Amazon Web Services domain into certificates being validated by the Online Certificate Status Protocol (OCSP). A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.

The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".

For more information, see Customizing Online Certificate Status Protocol (OCSP) in the Amazon Web Services Private Certificate Authority User Guide.

$sel:enabled:OcspConfiguration', ocspConfiguration_enabled - Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.

ocspConfiguration_ocspCustomCname :: Lens' OcspConfiguration (Maybe Text)

By default, Amazon Web Services Private CA injects an Amazon Web Services domain into certificates being validated by the Online Certificate Status Protocol (OCSP). A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.

The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".

For more information, see Customizing Online Certificate Status Protocol (OCSP) in the Amazon Web Services Private Certificate Authority User Guide.

ocspConfiguration_enabled :: Lens' OcspConfiguration Bool

Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.