OcspConfiguration
¶
Source code in docs_src/capo_acm_pca/types/ocsp_configuration.py
enabled
instance-attribute
¶
enabled: Boolean
Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
ocsp_custom_cname
instance-attribute
¶
ocsp_custom_cname: NotRequired[CnameString]
By default, Amazon Web Services Private CA injects an Amazon Web Services domain into certificates being validated by the Online Certificate Status Protocol (OCSP). A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.
The content of a Canonical Name (CNAME) record must conform to RFC2396 restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://".
For more information, see Customizing Online Certificate Status Protocol (OCSP) in the Amazon Web Services Private Certificate Authority User Guide.