Class: Aws::ACMPCA::Types::RevocationConfiguration

Inherits:

Struct

Object
Struct
Aws::ACMPCA::Types::RevocationConfiguration

show all

Includes:: Structure

Defined in:: lib/aws-sdk-acmpca/types.rb

Overview

Certificate revocation information used by the

CreateCertificateAuthority][1: and [UpdateCertificateAuthority]

actions. Your private certificate authority (CA) can configure Online Certificate Status Protocol (OCSP) support and/or maintain a certificate revocation list (CRL). OCSP returns validation information about certificates as requested by clients, and a CRL contains an updated list of certificates revoked by your CA. For more information, see [RevokeCertificate] and [Setting up a certificate revocation method] in the *Amazon Web Services Private Certificate Authority User Guide*.

[1]: docs.aws.amazon.com/privateca/latest/APIReference/API_CreateCertificateAuthority.html [2]: docs.aws.amazon.com/privateca/latest/APIReference/API_UpdateCertificateAuthority.html [3]: docs.aws.amazon.com/privateca/latest/APIReference/API_RevokeCertificate.html [4]: docs.aws.amazon.com/privateca/latest/userguide/revocation-setup.html

Constant Summary collapse

SENSITIVE =

[]

Instance Attribute Summary collapse

#crl_configuration ⇒ Types::CrlConfiguration

Configuration of the certificate revocation list (CRL), if any, maintained by your private CA.
#ocsp_configuration ⇒ Types::OcspConfiguration

Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA.

Instance Attribute Details

#crl_configuration ⇒ `Types::CrlConfiguration`

Configuration of the certificate revocation list (CRL), if any, maintained by your private CA. A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts every 15 minutes.

Returns:

(Types::CrlConfiguration)

# File 'lib/aws-sdk-acmpca/types.rb', line 2370

class RevocationConfiguration < Struct.new(
  :crl_configuration,
  :ocsp_configuration)
  SENSITIVE = []
  include Aws::Structure
end

#ocsp_configuration ⇒ `Types::OcspConfiguration`

Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA. When you revoke a certificate, OCSP responses may take up to 60 minutes to reflect the new status.