Struct google_privateca1_beta1::api::CertificateAuthorityPolicy

pub struct CertificateAuthorityPolicy {
    pub allowed_common_names: Option<Vec<String>>,
    pub allowed_config_list: Option<AllowedConfigList>,
    pub allowed_issuance_modes: Option<IssuanceModes>,
    pub allowed_locations_and_organizations: Option<Vec<Subject>>,
    pub allowed_sans: Option<AllowedSubjectAltNames>,
    pub maximum_lifetime: Option<String>,
    pub overwrite_config_values: Option<ReusableConfigWrapper>,
}

The issuing policy for a CertificateAuthority. Certificates will not be successfully issued from this CertificateAuthority if they violate the policy.

This type is not used in any activity, and only used as part of another schema.

Fields

allowed_common_names: Option<Vec<String>>

Optional. If any value is specified here, then all Certificates issued by the CertificateAuthority must match at least one listed value. If no value is specified, all values will be allowed for this fied. Glob patterns are also supported.

allowed_config_list: Option<AllowedConfigList>

Optional. All Certificates issued by the CertificateAuthority must match at least one listed ReusableConfigWrapper in the list.

allowed_issuance_modes: Option<IssuanceModes>

Optional. If specified, then only methods allowed in the IssuanceModes may be used to issue Certificates.

allowed_locations_and_organizations: Option<Vec<Subject>>

Optional. If any Subject is specified here, then all Certificates issued by the CertificateAuthority must match at least one listed Subject. If a Subject has an empty field, any value will be allowed for that field.

allowed_sans: Option<AllowedSubjectAltNames>

Optional. If a AllowedSubjectAltNames is specified here, then all Certificates issued by the CertificateAuthority must match AllowedSubjectAltNames. If no value or an empty value is specified, any value will be allowed for the SubjectAltNames field.

maximum_lifetime: Option<String>

Optional. The maximum lifetime allowed by the CertificateAuthority. Note that if the any part if the issuing chain expires before a Certificate’s requested maximum_lifetime, the effective lifetime will be explicitly truncated.

overwrite_config_values: Option<ReusableConfigWrapper>

Optional. All Certificates issued by the CertificateAuthority will use the provided configuration values, overwriting any requested configuration values.

Trait Implementations

impl Clone for CertificateAuthorityPolicy

fn clone(&self) -> CertificateAuthorityPolicy

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CertificateAuthorityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CertificateAuthorityPolicy

fn default() -> CertificateAuthorityPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CertificateAuthorityPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl Serialize for CertificateAuthorityPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl Part for CertificateAuthorityPolicy