From 9d6e6241954d001a5b49e4ea9a48c10e2a792958 Mon Sep 17 00:00:00 2001 From: "Chris St. Pierre" Date: Mon, 10 Dec 2012 17:19:54 -0600 Subject: generate XML schema docs from XML schemas themselves --- schemas/sslca-cert.xsd | 167 ++++++++++++++++++++++++++++++++++++++++++------- 1 file changed, 145 insertions(+), 22 deletions(-) (limited to 'schemas/sslca-cert.xsd') diff --git a/schemas/sslca-cert.xsd b/schemas/sslca-cert.xsd index 07baf3390..a9c01fb29 100644 --- a/schemas/sslca-cert.xsd +++ b/schemas/sslca-cert.xsd @@ -1,43 +1,166 @@ - SSLCA cert.xml schema for bcfg2 - Chris St. Pierre + Schema for :ref:`server-plugins-generators-sslca` ``cert.xml`` - + + + + An **SSLCACertGroupType** is a tag used to provide logic. + Child entries of an SSLCACertGroupType tag only apply to + machines that match the condition specified -- either + membership in a group, or a matching client name. + :xml:attribute:`SSLCACertGroupType:negate` can be set to negate + the sense of the match. + + - - - + + + - - + + + + The name of the client or group to match on. Child entries + will only apply to this client or group (unless + :xml:attribute:`SSLCACertGroupType:negate` is set). + + + + + + + Negate the sense of the match, so that child entries only + apply to a client if it is not a member of the given group + or does not have the given name. + + + + + + + Available certificate formats + + + + + + + + + + + Explicitly specify subject alternative names for the generated + certificate. + + + + + - - - - - - - - - - - + + + + The full path to the key entry to use for this certificate. + This is the *client* path; e.g., for a key defined at + ``/var/lib/bcfg2/SSLCA/etc/pki/tls/private/foo.key/key.xml``, + **key** should be ``/etc/pki/tls/private/foo.key``. + + + + + + + The certificate format to produce. + + + + + + + The name of the CA (from :ref:`bcfg2.conf + <sslca-configuration>`) to use to generate this + certificate. + + + + + + + Time (in days) the certificate will be valid for. + + + + + + + Override the country set in the CA config + + + + + + + Override the location set in the CA config + + + + + + + Override the state set in the CA config + + + + + + + Override the organizational unit set in the CA config + + + + + + + Override the organization set in the CA config + + + + + + + Override the email address set in the CA config + + + + + + + Append the CA chain certificate to the generated certificate + (e.g., to produce a certificate in the format required by Nginx.) + + + + + + Top-level tag for describing an SSLCA generated certificate. + + - - - + + + -- cgit v1.2.3-1-g7c22