NAME

OpenXPKI::Server::Workflow::Activity::CSR::CheckPolicySubjectDuplicate

DESCRIPTION

Check if another certificate with the same subject already exists. The default is to check against entity certificates in the same realm which are not expired and not revoked. This includes certificates with a notbefore date in the future! See the parameters section for other search options.

Configuration

Activity Parameters

target_key: Default is check_policy_subject_duplicate, holds list of identifiers found.
any_realm: Boolean, search certificates globally.
profile: Only search for certificates with this profile. Hint: Use the _map_syntax to grab the profile from the workflow.
cn_only: Check only on the common name of the certificate.
allow_renewal_period: Set to a OpenXPKI::DateTime validity specification (eg. +0003 for three month) to allow renewals within a defined period. Certificates which expire within the given period are not considered to trigger a duplicate error.
cert_identifier_ignore: Pass a single certificate identifier that is removed from the list in case it was found. This is useful when running this check on a renewal/replace workflow where you already know there is one matching certificate.