Jeremie Klein > App-CamelPKI-0.07 > App::CamelPKI::Controller::CA

Download:
CamelPKI/App-CamelPKI-0.07.tar.gz

Dependencies

Annotate this POD

CPAN RT

Open  0
Report a bug
Source  

NAME ^

App::CamelPKI::Controller::CA - Camel-PKI Certiciate Authority controller.

DESCRIPTION ^

This controller provides the CA-wide actions that are independent of any given certificate template.

Actions with name ending by _pem don't use App::CamelPKI::View::JSON, but rather transmit directly their data in text/plain; this enables operation with very basic clients (e.g. 'wget'). Most of these text/plain actions do not require a client certificate and are publicly accessible.

certificate_pem

Returns the AC certicate, in PEM format.

Note: the Content-Type is text/plain, and not application/pkix-cert (as mentioned in RFC2585), because it would seem that the latter is intended for DER format.

certificate_chain_pem

Returns a list of certificates in PEM format concatenated together. The first of these certificates is the same that "certicate_pem"; the whole list constitues a valid certification chain in the sense of RFC3280 section 6.

gen_crl

Immediately generates a new CRL, and returns it in PEM format.

Note: the Content-Type is text/plain, and not application/pkix-cert (as mentioned in RFC2585), because it would seem that the latter is intended for DER format.

current_crl

Returns the last CRL issued by "gen_crl", unless it is set to expire shortly, in which case a new CRL is generated, stored and returned.

examine_crl

Sends the right template in order to consult the CRL.

download_crl

Sends back in a text file in DER format the CRL.

list_issued_certificates

Gets the list of Certificates wich are currently issued and not revoked yet.

list_revoked_certificates

Gets the list of Certificates wich are currently revoked.