@pulumi/tls
Version:
A Pulumi package to create TLS resources in Pulumi programs.
152 lines (151 loc) • 4.22 kB
TypeScript
export interface CertRequestSubject {
/**
* Distinguished name: `CN`
*/
commonName?: string;
/**
* Distinguished name: `C`
*/
country?: string;
/**
* ASN.1 Object Identifier (OID): `1.2.840.113549.1.9.1`
*/
emailAddress?: string;
/**
* Distinguished name: `L`
*/
locality?: string;
/**
* Distinguished name: `O`
*/
organization?: string;
/**
* Distinguished name: `OU`
*/
organizationalUnit?: string;
/**
* Distinguished name: `PC`
*/
postalCode?: string;
/**
* Distinguished name: `ST`
*/
province?: string;
/**
* Distinguished name: `SERIALNUMBER`
*/
serialNumber?: string;
/**
* Distinguished name: `STREET`
*/
streetAddresses?: string[];
}
export interface GetCertificateCertificate {
/**
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
*/
certPem: string;
/**
* `true` if the certificate is of a CA (Certificate Authority).
*/
isCa: boolean;
/**
* Who verified and signed the certificate, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).
*/
issuer: string;
/**
* The time until which the certificate is invalid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
*/
notAfter: string;
/**
* The time after which the certificate is valid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
*/
notBefore: string;
/**
* The key algorithm used to create the certificate.
*/
publicKeyAlgorithm: string;
/**
* Number that uniquely identifies the certificate with the CA's system.
* The `format` function can be used to convert this *base 10* number into other bases, such as hex.
*/
serialNumber: string;
/**
* The SHA1 fingerprint of the public key of the certificate.
*/
sha1Fingerprint: string;
/**
* The algorithm used to sign the certificate.
*/
signatureAlgorithm: string;
/**
* The entity the certificate belongs to, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).
*/
subject: string;
/**
* The version the certificate is in.
*/
version: number;
}
export interface SelfSignedCertSubject {
/**
* Distinguished name: `CN`
*/
commonName?: string;
/**
* Distinguished name: `C`
*/
country?: string;
/**
* ASN.1 Object Identifier (OID): `1.2.840.113549.1.9.1`
*/
emailAddress?: string;
/**
* Distinguished name: `L`
*/
locality?: string;
/**
* Distinguished name: `O`
*/
organization?: string;
/**
* Distinguished name: `OU`
*/
organizationalUnit?: string;
/**
* Distinguished name: `PC`
*/
postalCode?: string;
/**
* Distinguished name: `ST`
*/
province?: string;
/**
* Distinguished name: `SERIALNUMBER`
*/
serialNumber?: string;
/**
* Distinguished name: `STREET`
*/
streetAddresses?: string[];
}
export declare namespace config {
interface Proxy {
/**
* When `true` the provider will discover the proxy configuration from environment variables. This is based upon [`http.ProxyFromEnvironment`](https://pkg.go.dev/net/http#ProxyFromEnvironment) and it supports the same environment variables (default: `true`).
*/
fromEnv?: boolean;
/**
* Password used for Basic authentication against the Proxy.
*/
password?: string;
/**
* URL used to connect to the Proxy. Accepted schemes are: `http`, `https`, `socks5`.
*/
url?: string;
/**
* Username (or Token) used for Basic authentication against the Proxy.
*/
username?: string;
}
}