Google Certificate Authority Service V1 Client - Class CertificateIdentityConstraints (1.3.1)

Reference documentation and code samples for the Google Certificate Authority Service V1 Client class CertificateIdentityConstraints.

Describes constraints on a Certificate's Subject and SubjectAltNames.

Generated from protobuf message google.cloud.security.privateca.v1.CertificateIdentityConstraints

Namespace

Google \ Cloud \ Security \ PrivateCA \ V1

Methods

__construct

Constructor.

Parameters
NameDescription
data array

Optional. Data for populating the Message object.

↳ cel_expression Google\Type\Expr

Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel

↳ allow_subject_passthrough bool

Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

↳ allow_subject_alt_names_passthrough bool

Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

getCelExpression

Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel

Returns
TypeDescription
Google\Type\Expr|null

hasCelExpression

clearCelExpression

setCelExpression

Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel

Parameter
NameDescription
var Google\Type\Expr
Returns
TypeDescription
$this

getAllowSubjectPassthrough

Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

Returns
TypeDescription
bool

hasAllowSubjectPassthrough

clearAllowSubjectPassthrough

setAllowSubjectPassthrough

Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.

Parameter
NameDescription
var bool
Returns
TypeDescription
$this

getAllowSubjectAltNamesPassthrough

Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

Returns
TypeDescription
bool

hasAllowSubjectAltNamesPassthrough

clearAllowSubjectAltNamesPassthrough

setAllowSubjectAltNamesPassthrough

Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.

Parameter
NameDescription
var bool
Returns
TypeDescription
$this