acmpca/aws.sdk.kotlin.services.acmpca.model/CreateCertificateAuthorityRequest/Builder/revocationConfiguration

revocationConfiguration

fun revocationConfiguration(block: RevocationConfiguration.Builder.() -> Unit)

construct an aws.sdk.kotlin.services.acmpca.model.RevocationConfiguration inside the given block

var revocationConfiguration: RevocationConfiguration?

Contains information to enable Online Certificate Status Protocol (OCSP) support, to enable a certificate revocation list (CRL), to enable both, or to enable neither. The default is for both certificate validation mechanisms to be disabled.

The following requirements apply to revocation configurations.

  • A configuration disabling CRLs or OCSP must contain only the Enabled=False parameter, and will fail if other parameters such as CustomCname or ExpirationInDays are included.

  • In a CRL configuration, the S3BucketName parameter must conform to Amazon S3 bucket naming rules.

  • A configuration containing a custom Canonical Name (CNAME) parameter for CRLs or OCSP must conform to RFC2396 restrictions on the use of special characters in a CNAME.

  • In a CRL or OCSP configuration, the value of a CNAME parameter must not include a protocol prefix such as "http://" or "https://". For more information, see the OcspConfiguration and CrlConfiguration types.