MAN page from OpenSuSE perl-OpenXPKI-Core-0.9.1389-6.362.CS.i586.rpm

OpenXPKI::Server::Workflow::Validator::KeyLength

Section: User Contributed Perl Documentation (3)
Updated: 2008-09-30
Index 

NAME

OpenXPKI::Server::Workflow::Validator::KeyLength 

SYNOPSIS

<action name=``CreateCSR''>
  <validator name=``KeyLength''
           class=``OpenXPKI::Server::Workflow::Validator::KeyLength''>
      <param name=``min'' value=``rsaEncryption: 2048, dsaEncryption: 2048, id-ecPublicKey: 191''/>
      <param name=``max'' value=``rsaEncryption: 4096, dsaEncryption: 2048, id-ecPublicKey: 800''/>
      <param name=``fail_on_unknown_algorithm'' value=``1''/>
  </validator></action> 

DESCRIPTION

This validator checks the length of the public key in the CSR.It can be configured to use both a minimum (required) and maximum (optional)value for the key length in bits for different algorithm.

The example above would allow you to make sure that RSA keys are between2048 and 4096 bits, DSA keys exactly 2048 bits and EC-DSA keys between191 and 800 bits. The validator would fail on any other algorithm (thiscan be used to force people to only use RSA keys, for example).

---

 

Index

NAME

SYNOPSIS

DESCRIPTION

---

This document was created byman2html,using the manual pages.