preset_subject_parts_from_profile

Parameters

• "profile" Str - certificate profile name, required
• "fields" ArrayRef - list of field names to query, default: all fields of the given style
• "style" Bool - profile style to query, required if "fields" is not specified
• "section" Str - ui section (only used if "style" was specified), default: "subject"
• "preset" HashRef

The parser knows four different notations for the preset rules.

clonable field word.X

Expects $param->{word} to be an array and creates one field item for each value. The X is a literal character.

DN component rdn / rdn.n

Create a field using the n-th value of the dn component rdn. If n is not given the first component is used. E.g. to set a field to the commonName of a used CSR write CN or CN.0. To use the second occurence of "organizational unit" write OU.1.

The list of supported RDNs is C|ST|O|OU|CN|DC|L|UID|SN|GN.

additional data word.key

If additional key/value data was passed as input, e.g. the userinfo hash you can access those items writing e.g. userinfo.email. To avoid any ambigouties the section name must be lowercase and match the key of the hash in the input data, the latter key can use any word character.

template

If none of the above rules is matched, the string is handed over to template toolkit using the preset hash as variable input. If the field is clonable, the result is split at the pipe symbol and a field is added for each non-empty item.