AWS::ACMPCA::CertificateAuthority OcspConfiguration
Contains information to enable and configure Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "Enabled" :
Boolean
, "OcspCustomCname" :String
}
YAML
Enabled:
Boolean
OcspCustomCname:String
Properties
Enabled
-
Flag enabling use of the Online Certificate Status Protocol (OCSP) for validating certificate revocation status.
Required: No
Type: Boolean
Update requires: No interruption
OcspCustomCname
-
By default, AWS Private CA injects an Amazon domain into certificates being validated by the Online Certificate Status Protocol (OCSP). A customer can alternatively use this object to define a CNAME specifying a customized OCSP domain.
Note
The content of a Canonical Name (CNAME) record must conform to RFC2396
restrictions on the use of special characters in URIs. Additionally, the value of the CNAME must not include a protocol prefix such as "http://" or "https://". Required: No
Type: String
Minimum:
0
Maximum:
253
Pattern:
^[-a-zA-Z0-9;/?:@&=+$,%_.!~*()']*$
Update requires: No interruption