NAME

OpenXPKI::Server::Workflow::Validator::CertIdentifierExists

SYNOPSIS

    class: OpenXPKI::Server::Workflow::Validator::CertIdentifierExists
    param:
        entity_only: 1
        pki_realm: _any
    arg:
      - $cert_identifier

DESCRIPTION

This validator checks whether a given certificate identifier exists. Based on the parameters it can check weather the certificate is in a given realm and if it is an entity certificate. Both parameters are optional. Note that there is no check on the validity of the certificate.

To check if the certificate identifier is an register alias, you can set is_token or in_alias_group. This requires that an entry in the alias table exists with the given properties. Note that those flags expect the alias to be registered in the current session realm and do not check the realm of the certificate itself, any value given to pki_realm is ignored.

Argument

$cert_identifier: The certificate identifier

Parameter

empty_ok: Silently pass if no cert_identifier was given, useful when a workflow has an alternative way to pass the identifier, e.g. via PEM block.
pki_realm: Can be the name of a realm or the special word _any. If not given, default ist to check in the session realm only!
entity_only: If set, the certificate must be an entity certificate.
is_token: Expects the name of a token type as defined in crypto.type and checks if the certificate has an registered alias matching this token type in the current realm.
in_alias_group: Expects the name of an alias group and checks if the certificate has an registered alias in this group.