MAN page from OpenSuSE perl-OpenXPKI-Core-0.9.1389-6.362.CS.i586.rpm

OpenXPKI::Server::Workflow::Validator::ApprovalSignature

Section: User Contributed Perl Documentation (3)
Updated: 2008-12-22
Index

NAME

SYNOPSIS

DESCRIPTION

This validator checks whether a given signature for approval isvalid. It does this by running through the following checks:- If no signature is defined and none required, it returns 1- Else, it checks:
  - that the signature is in base64 format
  - that the signature text matches one of the translations given by the
    server
  - that the PKCS7 is a valid signature for the given text
  - that the certificate itself or a certificate in its trust chain
    is configured to be trusted
  - that the signer certificate is in the database and currently valid

Configuration:The following parameters can be defined in the validator definition:- signature_required: if true, enforce a signature on the approval- pkcs7tool: the id of the pkcs7tool to use (see config.xml)- trust_anchors: a comma-seperated list of trust anchor identifiers

This document was created byman2html,using the manual pages.