Reference documentation and code samples for the Google Certificate Authority Service V1 Client class CertificateIdentityConstraints.
Describes constraints on a Certificate's Subject and SubjectAltNames.
Generated from protobuf message google.cloud.security.privateca.v1.CertificateIdentityConstraints
Methods
__construct
Constructor.
| Parameters | |
|---|---|
| Name | Description |
data |
array
Optional. Data for populating the Message object. |
↳ cel_expression |
Google\Type\Expr
Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel |
↳ allow_subject_passthrough |
bool
Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded. |
↳ allow_subject_alt_names_passthrough |
bool
Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded. |
getCelExpression
Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed.
To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel
| Returns | |
|---|---|
| Type | Description |
Google\Type\Expr|null | |
hasCelExpression
clearCelExpression
setCelExpression
Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed.
To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel
| Parameter | |
|---|---|
| Name | Description |
var |
Google\Type\Expr
|
| Returns | |
|---|---|
| Type | Description |
$this | |
getAllowSubjectPassthrough
Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
| Returns | |
|---|---|
| Type | Description |
bool | |
hasAllowSubjectPassthrough
clearAllowSubjectPassthrough
setAllowSubjectPassthrough
Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
| Parameter | |
|---|---|
| Name | Description |
var |
bool
|
| Returns | |
|---|---|
| Type | Description |
$this | |
getAllowSubjectAltNamesPassthrough
Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
| Returns | |
|---|---|
| Type | Description |
bool | |
hasAllowSubjectAltNamesPassthrough
clearAllowSubjectAltNamesPassthrough
setAllowSubjectAltNamesPassthrough
Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
| Parameter | |
|---|---|
| Name | Description |
var |
bool
|
| Returns | |
|---|---|
| Type | Description |
$this | |