libZSservicesZSamazonka-certificatemanager-pcaZSamazonka-certificatemanager-pca
Copyright(c) 2013-2021 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay+amazonka@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone

Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

Description

 
Synopsis

Documentation

data RevocationConfiguration Source #

Certificate revocation information used by the CreateCertificateAuthority and UpdateCertificateAuthority actions. Your private certificate authority (CA) can configure Online Certificate Status Protocol (OCSP) support and/or maintain a certificate revocation list (CRL). OCSP returns validation information about certificates as requested by clients, and a CRL contains an updated list of certificates revoked by your CA. For more information, see RevokeCertificate and Setting up a certificate revocation method in the /AWS Certificate Manager Private Certificate Authority (PCA) User Guide/.

See: newRevocationConfiguration smart constructor.

Constructors

RevocationConfiguration' 

Fields

  • crlConfiguration :: Maybe CrlConfiguration

    Configuration of the certificate revocation list (CRL), if any, maintained by your private CA. A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, ACM Private CA makes further attempts every 15 minutes.

  • ocspConfiguration :: Maybe OcspConfiguration

    Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA. When you revoke a certificate, OCSP responses may take up to 60 minutes to reflect the new status.

Instances

Instances details
Eq RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

Read RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

Show RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

Generic RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

Associated Types

type Rep RevocationConfiguration :: Type -> Type #

NFData RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

Methods

rnf :: RevocationConfiguration -> () #

Hashable RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

ToJSON RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

FromJSON RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

type Rep RevocationConfiguration Source # 
Instance details

Defined in Amazonka.CertificateManagerPCA.Types.RevocationConfiguration

type Rep RevocationConfiguration = D1 ('MetaData "RevocationConfiguration" "Amazonka.CertificateManagerPCA.Types.RevocationConfiguration" "libZSservicesZSamazonka-certificatemanager-pcaZSamazonka-certificatemanager-pca" 'False) (C1 ('MetaCons "RevocationConfiguration'" 'PrefixI 'True) (S1 ('MetaSel ('Just "crlConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe CrlConfiguration)) :*: S1 ('MetaSel ('Just "ocspConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe OcspConfiguration))))

newRevocationConfiguration :: RevocationConfiguration Source #

Create a value of RevocationConfiguration with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:crlConfiguration:RevocationConfiguration', revocationConfiguration_crlConfiguration - Configuration of the certificate revocation list (CRL), if any, maintained by your private CA. A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, ACM Private CA makes further attempts every 15 minutes.

$sel:ocspConfiguration:RevocationConfiguration', revocationConfiguration_ocspConfiguration - Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA. When you revoke a certificate, OCSP responses may take up to 60 minutes to reflect the new status.

revocationConfiguration_crlConfiguration :: Lens' RevocationConfiguration (Maybe CrlConfiguration) Source #

Configuration of the certificate revocation list (CRL), if any, maintained by your private CA. A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, ACM Private CA makes further attempts every 15 minutes.

revocationConfiguration_ocspConfiguration :: Lens' RevocationConfiguration (Maybe OcspConfiguration) Source #

Configuration of Online Certificate Status Protocol (OCSP) support, if any, maintained by your private CA. When you revoke a certificate, OCSP responses may take up to 60 minutes to reflect the new status.