mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-23 15:41:07 +02:00
eb8496e874
* Rename crlConfig to CrlConfig. Rename defaultCrlConfig to DefaultCrlConfig. * Move CrlConfig and DefaultCrlConfig to new package pki/revocation. * Rename revocationInfo to RevocationInfo. * Move RevocationInfo to pki/revocation. * Add StorageContext interface to PKI's revocation package. * Add CrlBuilderType interface to pki_backend package. The purpose of the interface is to make it possible to gradually move (refactor) CrlBuilder to the revocation package. * Move CrlConfig and DefaultCrlConfig to package pki_backend. * Make StorageContext.CrlBuilder() return a CrlBuilderType. Add methods SetLastDeltaRebuildCheckTime() and ShouldInvalidate() to CrlBuilderType. * Move fetchIssuerMapForRevocationChecking to PKI's revocation package. * Run make fmt.
39 lines
1.4 KiB
Go
39 lines
1.4 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package pki_backend
|
|
|
|
const latestCrlConfigVersion = 1
|
|
|
|
// CRLConfig holds basic CRL configuration information
|
|
type CrlConfig struct {
|
|
Version int `json:"version"`
|
|
Expiry string `json:"expiry"`
|
|
Disable bool `json:"disable"`
|
|
OcspDisable bool `json:"ocsp_disable"`
|
|
AutoRebuild bool `json:"auto_rebuild"`
|
|
AutoRebuildGracePeriod string `json:"auto_rebuild_grace_period"`
|
|
OcspExpiry string `json:"ocsp_expiry"`
|
|
EnableDelta bool `json:"enable_delta"`
|
|
DeltaRebuildInterval string `json:"delta_rebuild_interval"`
|
|
UseGlobalQueue bool `json:"cross_cluster_revocation"`
|
|
UnifiedCRL bool `json:"unified_crl"`
|
|
UnifiedCRLOnExistingPaths bool `json:"unified_crl_on_existing_paths"`
|
|
}
|
|
|
|
// Implicit default values for the config if it does not exist.
|
|
var DefaultCrlConfig = CrlConfig{
|
|
Version: latestCrlConfigVersion,
|
|
Expiry: "72h",
|
|
Disable: false,
|
|
OcspDisable: false,
|
|
OcspExpiry: "12h",
|
|
AutoRebuild: false,
|
|
AutoRebuildGracePeriod: "12h",
|
|
EnableDelta: false,
|
|
DeltaRebuildInterval: "15m",
|
|
UseGlobalQueue: false,
|
|
UnifiedCRL: false,
|
|
UnifiedCRLOnExistingPaths: false,
|
|
}
|