View This Cert Revoc Ca
/management/weblogic/{version}/serverConfig/securityConfiguration/certRevoc/certRevocCas/{name}
View this cert revoc ca.
Request
-
name: string
The name property of the instance in the collection.
-
version: string
The version of the WebLogic REST interface.
-
excludeFields(optional): string
The 'excludeFields' query parameter is used to restrict which fields are returned in the response. It is a comma separated list of field names. If present, only fields whose name is not on the list will be returned. If not present, all fields are returned (unless the 'fields' query parameter is specified). Note: 'fields' must not be specified if 'excludeFields' is specified.
-
excludeLinks(optional): string
The 'excludeLinks' query parameter is used to restrict which links are returned in the response. It is a comma separated list of link relationship names. If present, only links whose relationship name is not on the list will be returned. If not present, all links are returned (unless the 'links' query parameter is specified). Note: 'links' must not be specified if 'excludeLinks' is specified.
-
fields(optional): string
The 'fields' query parameter is used to restrict which fields are returned in the response. It is a comma separated list of field names. If present, only fields with matching names are returned. If not present, all fields are returned (unless the 'excludeFields' query parameter is specified). Note: 'excludeFields' must not be specified if 'fields' is specified.
-
links(optional): string
The 'links' query parameter is used to restrict which links are returned in the response. It is a comma separated list of link relationship names. If present, only links with matching relationship names are returned. If not present, all links are returned (unless the 'excludeLinks' query parameter is specified). Note: 'excludeLinks' must not be specified if 'links' is specified.
-
Admin: basic
Type:
basic
Description:A user in the Admin security role.
-
Deployer: basic
Type:
basic
Description:A user in the Deployer security role.
-
Monitor: basic
Type:
basic
Description:A user in the Monitor security role.
-
Operator: basic
Type:
basic
Description:A user in the Operator security role.
Response
- application/json
200 Response
Returns this cert revoc ca.
object
-
checkingDisabled(optional):
boolean
Default Value:
false
For this CA, determines whether certificate revocation checking is disabled.
-
crlDpBackgroundDownloadEnabled(optional):
boolean
For this CA, determines whether the CRL Distribution Point background downloading, to automatically update the local CRL cache, is enabled.
-
crlDpDownloadTimeout(optional):
integer(int64)
Minimum Value:
1
Maximum Value:300
For this CA, determines the overall timeout for the Distribution Point CRL download, expressed in seconds.
The valid range is 1 thru 300 seconds.
-
crlDpEnabled(optional):
boolean
For this CA, determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.
-
crlDpUrl(optional):
string
Default Value:
oracle.doceng.json.BetterJsonNull@63e529f2
For this CA, determines the CRL Distribution Point URL to use as failover or override for the URL found in the CRLDistributionPoints extension in the certificate.
-
crlDpUrlUsage(optional):
string
Default Value:
FAILOVER
Allowed Values:[ "FAILOVER", "OVERRIDE" ]
For this CA, determines how
getCrlDpUrl
is used: as failover in case the URL in the certificate CRLDistributionPoints extension is invalid or not found, or as a value overriding the URL found in the certificate CRLDistributionPoints extension. -
distinguishedName(optional):
string
Default Value:
oracle.doceng.json.BetterJsonNull@6962efd0
Determines the identity of this per-CA configuration using the distinguished name (defined in RFC 2253), which is used in certificates issued by the represented certificate authority.
For example:
"CN=CertGenCAB, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US"
This will be used to match this configuration to issued certificates requiring revocation checking.
-
dynamicallyCreated(optional):
boolean
Read Only:
true
Default Value:false
Return whether the MBean was created dynamically or is persisted to config.xml
-
failOnUnknownRevocStatus(optional):
boolean
For this CA, determines whether certificate path checking should fail, if revocation status could not be determined.
-
id(optional):
integer(int64)
Read Only:
true
Return the unique id of this MBean instance
-
methodOrder(optional):
string
Allowed Values:
[ "OCSP", "CRL", "OCSP_THEN_CRL", "CRL_THEN_OCSP" ]
For this CA, determines the certificate revocation checking method order.
NOTE THAT omission of a specific method disables that method.
-
name(optional):
string
Read Only:
true
The user-specified name of this MBean instance.
This name is included as one of the key properties in the MBean's
javax.management.ObjectName
Name=user-specified-name
Constraints
- legal null
-
notes(optional):
string
Optional information that you can include to describe this configuration.
WebLogic Server saves this note in the domain's configuration file (
config.xml
) as XML PCDATA. All left angle brackets (<) are converted to the xml entity<. Carriage returns/line feeds are preserved.)>
Note: If you create or edit a note from the Administration Console, the Administration Console does not preserve carriage returns/line feeds.
-
ocspNonceEnabled(optional):
boolean
For this CA, determines whether a nonce is sent with OCSP requests, to force a fresh (not pre-signed) response.
-
ocspResponderCertIssuerName(optional):
string
Default Value:
oracle.doceng.json.BetterJsonNull@76f42a10
For this CA, determines the explicitly trusted OCSP responder certificate issuer name, when the attribute returned by
getOcspResponderExplicitTrustMethod
is "USE_ISSUER_SERIAL_NUMBER".The issuer name is formatted as a distinguished name per RFC 2253, for example "CN=CertGenCAB, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US".
When
getOcspResponderCertIssuerName
returns a non-null value then thegetOcspResponderCertSerialNumber
must also be set. -
ocspResponderCertSerialNumber(optional):
string
Default Value:
oracle.doceng.json.BetterJsonNull@2c082c1b
For this CA, determines the explicitly trusted OCSP responder certificate serial number, when the attribute returned by
getOcspResponderExplicitTrustMethod
is "USE_ISSUER_SERIAL_NUMBER".The serial number is formatted as a hexidecimal string, with optional colon or space separators, for example "2A:FF:00".
When
getOcspResponderCertSerialNumber
returns a non-null value then thegetOcspResponderCertIssuerName
must also be set. -
ocspResponderCertSubjectName(optional):
string
Default Value:
oracle.doceng.json.BetterJsonNull@c6da547
For this CA, determines the explicitly trusted OCSP responder certificate subject name, when the attribute returned by
getOcspResponderExplicitTrustMethod
is "USE_SUBJECT".The subject name is formatted as a distinguished name per RFC 2253, for example "CN=CertGenCAB, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US".
In cases where the subject name alone is not sufficient to uniquely identify the certificate, then both the
getOcspResponderCertIssuerName
andgetOcspResponderCertSerialNumber
may be used instead. -
ocspResponderExplicitTrustMethod(optional):
string
Default Value:
NONE
Allowed Values:[ "NONE", "USE_SUBJECT", "USE_ISSUER_SERIAL_NUMBER" ]
For this CA, determines whether the OCSP Explicit Trust model is enabled and how the trusted certificate is specified.
The valid values:
- "NONE"
Explicit Trust is disabled
- "USE_SUBJECT"
Identify the trusted certificate using the subject DN specified in the attribute
getOcspResponderCertSubjectName
- "USE_ISSUER_SERIAL_NUMBER"
Identify the trusted certificate using the issuer DN and certificate serial number specified in the attributes
getOcspResponderCertIssuerName
andgetOcspResponderCertSerialNumber
, respectively.
-
ocspResponderUrl(optional):
string
Default Value:
oracle.doceng.json.BetterJsonNull@1c169125
For this CA, determines the OCSP responder URL to use as failover or override for the URL found in the certificate AIA. The usage is determined by
getOcspResponderUrlUsage
-
ocspResponderUrlUsage(optional):
string
Default Value:
FAILOVER
Allowed Values:[ "FAILOVER", "OVERRIDE" ]
For this CA, determines how
getOcspResponderUrl
is used: as failover in case the URL in the certificate AIA is invalid or not found, or as a value overriding the URL found in the certificate AIA. -
ocspResponseCacheEnabled(optional):
boolean
For this CA, determines whether the OCSP response local cache is enabled.
-
ocspResponseTimeout(optional):
integer(int64)
Minimum Value:
1
Maximum Value:300
For this CA, determines the timeout for the OCSP response, expressed in seconds.
The valid range is 1 thru 300 seconds.
-
ocspTimeTolerance(optional):
integer(int32)
Minimum Value:
0
Maximum Value:900
For this CA, determines the time tolerance value for handling clock-skew differences between clients and responders, expressed in seconds.
The validity period of the response is extended both into the future and into the past by the specified amount of time, effectively widening the validity interval.
The value is >=0 and <=900. 15 the maximum allowed tolerance is minutes.< p>=900.>
-
tags(optional):
array Items
Title:
Items
Return all tags on this Configuration MBean
-
type(optional):
string
Read Only:
true
Returns the type of the MBean.
Constraints
- unharvestable