Name

OpenXPKI::Server::Workflow::Activity::Reports::Summary

Description

Collect statistics about certificate counts, the resulting numbers are written into the context, see below.

near_expiry: Parseable OpenXPKI::Datetime value (autodetected), certificates expiring before the given date are shown as "near_expiry". Default is +000030 (30 days).
recent_expiry: Parseable OpenXPKI::Datetime value (autodetected), certificates which are expired after the given date are shown as "recent_expiry". Default is -000030 (30 days in the past).
recent_renewal: Parseable OpenXPKI::Datetime value (autodetected), certificates which have been issued as renewal to a predecessor certificate after the given date are shown as "recent_renewal". Default is -000030 (30 days in the past).
valid_at: Parseable OpenXPKI::Datetime value (autodetected) used as based for all date related calculations. Default is now.
target_key: If set, the result is written into this single context value as a hash using the keys named below as keys in the hash.
cutoff_notbefore (not implemented yet): Parseable OpenXPKI::Datetime value (autodetected), hide certificates where notbefore is below given date.
cutoff_notafter (not implemented yet): Parseable OpenXPKI::Datetime value (autodetected), hide certificates where notafter is above given date.

After completion the following parameters will be set in the context or as key/value pairs of the hash written to target_key.

total_count: Total number of certificates.
total_revoked: Number of certificates in revoked status (includes CRL pending).
total_expired: Number of expired certificates (without revoked)
total_distinct: Number of distinct subjects (includes revoked)
valid_count: Number of valid certificates (in validity window and not revoked)
valid_distinct: Number of distinct subjects within valid certificates
valid_revoked: Number of certificates that are in validity window but revoked.
near_expiry: Number of valid (not revoked) certificates that will expiry within the given window.
recent_expiry: Number of valid (not revoked) certificates that have been expired within the given window.
recent_renewed: Number of certificates that have been issued within the given window as a renewal to a predecessor certificate.
by_profile: Contains the share of certificate profiles of all valid certificates as a key/value map. The key is the internal name of the profile and the value is the absolute number of valid, issued certificates using this profile.