Name

new ( { CA, [ID, VALIDITY, CA_VALIDITY, CACERTIFICATE] } )

Create a new profile instance. Profile definitions are loaded from the config layer. The profile name can be given explicit via <ID>, in this case the node crl.<profile> must exist.

If no profile is given, the config layer is checked for a profile matching the name of the ca alias name. If no such profile is found, all values are loaded from crl.default.

A profile must define validity and digest, extension values are inherited from the default profile in case they are not set in the special profile.

CA

The alias of the ca token to be used (from the alias table)

ID

The name of the profile (as given in realm.crl)

VALIDITY

optional, override validity from profile definition. Must be a hashref useable with OpenXPKI::DateTime::get_validity. Only relative dates are supported.

CA_VALIDITY

optional, if given the computed nextupdate is checked if it exceeds the ca validity and uses the validity set in crl.<profile.lastcrl>. Absolute dates are supported but the actual timestamp in the crl might differ as it is converted to "hours from now".

CACERTIFICATE

PEM encoded ca certificate to use. This is mainly for testing, in regular operation the certificate is determined using the API.

__load_profile

Load the profile, called from constructor