// This is an automatically generated code sample.
// To make this code sample work in your Oracle Cloud tenancy,
// please replace the values for any parameters whose current values do not fit
// your use case (such as resource IDs, strings containing ‘EXAMPLE’ or ‘unique_id’, and
// boolean, number, and enum parameters with values not fitting your use case).

package main

import (
	"context"
	"fmt"
	"time"

	"github.com/oracle/oci-go-sdk/v65/certificatesmanagement"
	"github.com/oracle/oci-go-sdk/v65/common"
	"github.com/oracle/oci-go-sdk/v65/example/helpers"
)

func ExampleCreateCertificateAuthority() {
	// Create a default authentication provider that uses the DEFAULT
	// profile in the configuration file.
	// Refer to <see href="https://docs.cloud.oracle.com/en-us/iaas/Content/API/Concepts/sdkconfig.htm#SDK_and_CLI_Configuration_File>the public documentation</see> on how to prepare a configuration file.
	client, err := certificatesmanagement.NewCertificatesManagementClientWithConfigurationProvider(common.DefaultConfigProvider())
	helpers.FatalIfError(err)

	// Create a request and dependent object(s).

	req := certificatesmanagement.CreateCertificateAuthorityRequest{OpcRetryToken: common.String("EXAMPLE-opcRetryToken-Value"),
		CreateCertificateAuthorityDetails: certificatesmanagement.CreateCertificateAuthorityDetails{CertificateRevocationListDetails: &certificatesmanagement.CertificateRevocationListDetails{CustomFormattedUrls: []string{"EXAMPLE--Value"},
			ObjectStorageConfig: &certificatesmanagement.ObjectStorageBucketConfigDetails{ObjectStorageBucketName: common.String("EXAMPLE-objectStorageBucketName-Value"),
				ObjectStorageNamespace:        common.String("EXAMPLE-objectStorageNamespace-Value"),
				ObjectStorageObjectNameFormat: common.String("EXAMPLE-objectStorageObjectNameFormat-Value")}},
			CompartmentId: common.String("ocid1.test.oc1..<unique_ID>EXAMPLE-compartmentId-Value"),
			KmsKeyId:      common.String("ocid1.test.oc1..<unique_ID>EXAMPLE-kmsKeyId-Value"),
			Name:          common.String("EXAMPLE-name-Value"),
			CertificateAuthorityConfig: certificatesmanagement.CreateRootCaByGeneratingInternallyConfigDetails{SigningAlgorithm: certificatesmanagement.SignatureAlgorithmSha256WithRsa,
				Subject: &certificatesmanagement.CertificateSubject{CommonName: common.String("EXAMPLE-commonName-Value"),
					Country:                    common.String("EXAMPLE-country-Value"),
					DistinguishedNameQualifier: common.String("EXAMPLE-distinguishedNameQualifier-Value"),
					OrganizationalUnit:         common.String("EXAMPLE-organizationalUnit-Value"),
					Initials:                   common.String("EXAMPLE-initials-Value"),
					Surname:                    common.String("EXAMPLE-surname-Value"),
					Title:                      common.String("EXAMPLE-title-Value"),
					StateOrProvinceName:        common.String("EXAMPLE-stateOrProvinceName-Value"),
					GenerationQualifier:        common.String("EXAMPLE-generationQualifier-Value"),
					GivenName:                  common.String("EXAMPLE-givenName-Value"),
					Organization:               common.String("EXAMPLE-organization-Value"),
					Pseudonym:                  common.String("EXAMPLE-pseudonym-Value"),
					DomainComponent:            common.String("EXAMPLE-domainComponent-Value"),
					LocalityName:               common.String("EXAMPLE-localityName-Value"),
					SerialNumber:               common.String("EXAMPLE-serialNumber-Value"),
					Street:                     common.String("EXAMPLE-street-Value"),
					UserId:                     common.String("ocid1.test.oc1..<unique_ID>EXAMPLE-userId-Value")},
				Validity: &certificatesmanagement.Validity{TimeOfValidityNotAfter: &common.SDKTime{Time: time.Now()},
					TimeOfValidityNotBefore: &common.SDKTime{Time: time.Now()}},
				VersionName: common.String("EXAMPLE-versionName-Value")},
			CertificateAuthorityRules: []certificatesmanagement.CertificateAuthorityRule{certificatesmanagement.CertificateAuthorityIssuanceRule{NameConstraint: &certificatesmanagement.NameConstraint{ExcludedSubtree: []certificatesmanagement.NameConstraintSubtreeNode{certificatesmanagement.NameConstraintSubtreeNode{Type: certificatesmanagement.NameConstraintTypeDirectoryName,
				Value: common.String("EXAMPLE-value-Value")}},
				PermittedSubtree: []certificatesmanagement.NameConstraintSubtreeNode{certificatesmanagement.NameConstraintSubtreeNode{Type: certificatesmanagement.NameConstraintTypeIp,
					Value: common.String("EXAMPLE-value-Value")}}},
				PathLengthConstraint: common.Int(51)}},
			DefinedTags:            map[string]map[string]interface{}{"EXAMPLE_KEY_XPSWP": map[string]interface{}{"EXAMPLE_KEY_HBDfC": "EXAMPLE--Value"}},
			Description:            common.String("EXAMPLE-description-Value"),
			ExternalKeyDescription: common.String("EXAMPLE-externalKeyDescription-Value"),
			FreeformTags:           map[string]string{"EXAMPLE_KEY_eRBXv": "EXAMPLE_VALUE_9wVrIT8opnVYTkqGrbRP"}},
		OpcRequestId: common.String("L0ICIQ7IP9SN5QCIYAFY<unique_ID>")}

	// Send the request using the service client
	resp, err := client.CreateCertificateAuthority(context.Background(), req)
	helpers.FatalIfError(err)

	// Retrieve value from the response.
	fmt.Println(resp)
}