get_trust_anchors

The config path must have at least one of this keys defined, where the value is either a single item or a list of items of the defined type.

realm

Adds all active issuing ca certificates from the given realm as trust anchors, so all certificates issued from this realm will be accepted.

cacert

A certificate identifier to use as trusted issuer. The certificate must exist in the database but do not need to be in any particular realm or referenced in a token configuration.

alias

Name of an alias group from the aliases table, the alias items are read from the current realm or, if no items are found, from the global realm. Validity dates of the alias table are used.

Result is an ArrayRef of certificate identifiers.

Parameters

•

"path" Str - configuration path, must point to a config node which has at least one of the defining child nodes:

    path:
        realm:
         - democa
        cacert:
         - list of extra cert identifiers
        alias:
         - names of alias groups