NAME

Check if the profile allows key generation as specified by the "generate" parameter.

Example:

    can_use_server_key:
        class: OpenXPKI::Server::Workflow::Condition::KeyGenerationMode
        param:
            generate: server
            _map_profile: $cert_profile

Returns true if the key generation setting is either escrow, server or both. The setting is obtained for the given profile (by profile or from the default setting) from the node key.generate. If this node is missing, client is allowed and server is assumed ok if key.alg is not empty.

If the profile parameter is not given in the configuration, the context value of cert_profile is used.