EJBCA deprecated

The configuration options for the EJBCA integration

com.openexchange.guard.pki.ejbca.enabled

Enables/disables the EJBCA bundle.
Default: [no default]
Configcascade: false
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.verifySSLHostname

If the API calls to EJBCA should verify hostname when establishing SSL connection.
Default: [no default]
Configcascade: false
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.trustAll

If the user should trust all certificates from EJBCA. If set to false, each certificate obtained from EJBCA will be verified using the users configured CA authorities
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.serverBaseUrl

The baseUrl for the EJBCA server rest api. Example: https://10.50.3.124:8443/ejbca/ejbca-rest-api
Default: [no default]
Configcascade: false
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.timeout

Request timeout for connecting to EJBCA server
Default: [no default]
Configcascade: false
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.certificate

The client certificate to use when establishing the API call to EJBCA
Default: [no default]
Configcascade: false
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.ca

The certificate authority used to sign the API certificates. Likely the main CA for EJBCA
Default: [no default]
Configcascade: false
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.key

The private key for certificate authentication against EJBCA
Default: [no default]
Configcascade: false
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.lookupAvail

Specifies for a user if they should have access to this EJBCA server for certificate lookup
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.managesUsersCertificates

Specifies for a user if this EJBCA server manages their keys (creation, revoking, etc)
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.cryptoType

Specifies type of crypto for new certificates. Allowed is RSA, EdDSA, ECDSA
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.certificateAuthority

Specifies certificate authority to use for signing new certificates
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.certificateProfile

Specifies certificate profile to use for new certificate requests
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.endEntityProfile

Specifies the End Entity Profile to use for new certificate requests
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard

com.openexchange.guard.pki.ejbca.customCreateMessage

Custom message to display to user when creating new key. For example, discussing trust of the certificate
Default: [no default]
Configcascade: true
Reloadable: false
As of version: 4.0
Package: open-xchange-guard