@@ -69,164 +69,3 @@ be larger than the role max TTL.`,
6969
7070 return fields
7171}
72-
73- // addCACommonFields adds fields with help text specific to CA
74- // certificate issuing and signing
75- // func addCACommonFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema {
76- // fields = addIssueAndSignCommonFields(fields)
77-
78- // fields["alt_names"] = &framework.FieldSchema{
79- // Type: framework.TypeString,
80- // Description: `The requested Subject Alternative Names, if any,
81- // in a comma-delimited list. May contain both
82- // DNS names and email addresses.`,
83- // DisplayAttrs: &framework.DisplayAttributes{
84- // Name: "DNS/Email Subject Alternative Names (SANs)",
85- // },
86- // }
87-
88- // fields["common_name"] = &framework.FieldSchema{
89- // Type: framework.TypeString,
90- // Description: `The requested common name; if you want more than
91- // one, specify the alternative names in the alt_names
92- // map. If not specified when signing, the common
93- // name will be taken from the CSR; other names
94- // must still be specified in alt_names or ip_sans.`,
95- // }
96-
97- // fields["ttl"] = &framework.FieldSchema{
98- // Type: framework.TypeDurationSecond,
99- // Description: `The requested Time To Live for the certificate;
100- // sets the expiration date. If not specified
101- // the role default, backend default, or system
102- // default TTL is used, in that order. Cannot
103- // be larger than the mount max TTL. Note:
104- // this only has an effect when generating
105- // a CA cert or signing a CA cert, not when
106- // generating a CSR for an intermediate CA.`,
107- // DisplayAttrs: &framework.DisplayAttributes{
108- // Name: "TTL",
109- // },
110- // }
111-
112- // fields["ou"] = &framework.FieldSchema{
113- // Type: framework.TypeCommaStringSlice,
114- // Description: `If set, OU (OrganizationalUnit) will be set to
115- // this value.`,
116- // DisplayAttrs: &framework.DisplayAttributes{
117- // Name: "OU (Organizational Unit)",
118- // },
119- // }
120-
121- // fields["organization"] = &framework.FieldSchema{
122- // Type: framework.TypeCommaStringSlice,
123- // Description: `If set, O (Organization) will be set to
124- // this value.`,
125- // }
126-
127- // fields["country"] = &framework.FieldSchema{
128- // Type: framework.TypeCommaStringSlice,
129- // Description: `If set, Country will be set to
130- // this value.`,
131- // }
132-
133- // fields["locality"] = &framework.FieldSchema{
134- // Type: framework.TypeCommaStringSlice,
135- // Description: `If set, Locality will be set to
136- // this value.`,
137- // DisplayAttrs: &framework.DisplayAttributes{
138- // Name: "Locality/City",
139- // },
140- // }
141-
142- // fields["province"] = &framework.FieldSchema{
143- // Type: framework.TypeCommaStringSlice,
144- // Description: `If set, Province will be set to
145- // this value.`,
146- // DisplayAttrs: &framework.DisplayAttributes{
147- // Name: "Province/State",
148- // },
149- // }
150-
151- // fields["street_address"] = &framework.FieldSchema{
152- // Type: framework.TypeCommaStringSlice,
153- // Description: `If set, Street Address will be set to
154- // this value.`,
155- // DisplayAttrs: &framework.DisplayAttributes{
156- // Name: "Street Address",
157- // },
158- // }
159-
160- // fields["postal_code"] = &framework.FieldSchema{
161- // Type: framework.TypeCommaStringSlice,
162- // Description: `If set, Postal Code will be set to
163- // this value.`,
164- // DisplayAttrs: &framework.DisplayAttributes{
165- // Name: "Postal Code",
166- // },
167- // }
168-
169- // fields["serial_number"] = &framework.FieldSchema{
170- // Type: framework.TypeString,
171- // Description: `The requested serial number, if any. If you want
172- // more than one, specify alternative names in
173- // the alt_names map using OID 2.5.4.5.`,
174- // }
175-
176- // return fields
177- // }
178-
179- // // addCAKeyGenerationFields adds fields with help text specific to CA key
180- // // generation and exporting
181- // func addCAKeyGenerationFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema {
182- // fields["exported"] = &framework.FieldSchema{
183- // Type: framework.TypeString,
184- // Description: `Must be "internal" or "exported". If set to
185- // "exported", the generated private key will be
186- // returned. This is your *only* chance to retrieve
187- // the private key!`,
188- // }
189-
190- // fields["key_bits"] = &framework.FieldSchema{
191- // Type: framework.TypeInt,
192- // Default: 2048,
193- // Description: `The number of bits to use. You will almost
194- // certainly want to change this if you adjust
195- // the key_type.`,
196- // DisplayAttrs: &framework.DisplayAttributes{
197- // Value: 2048,
198- // },
199- // }
200-
201- // fields["key_type"] = &framework.FieldSchema{
202- // Type: framework.TypeString,
203- // Default: "rsa",
204- // Description: `The type of key to use; defaults to RSA. "rsa"
205- // and "ec" are the only valid values.`,
206- // AllowedValues: []interface{}{"rsa", "ec"},
207- // DisplayAttrs: &framework.DisplayAttributes{
208- // Value: "rsa",
209- // },
210- // }
211- // return fields
212- // }
213-
214- // addCAIssueFields adds fields common to CA issuing, e.g. when returning
215- // an actual certificate
216- // func addCAIssueFields(fields map[string]*framework.FieldSchema) map[string]*framework.FieldSchema {
217- // fields["max_path_length"] = &framework.FieldSchema{
218- // Type: framework.TypeInt,
219- // Default: -1,
220- // Description: "The maximum allowable path length",
221- // }
222-
223- // fields["permitted_dns_domains"] = &framework.FieldSchema{
224- // Type: framework.TypeCommaStringSlice,
225- // Description: `Domains for which this certificate is allowed to sign or issue child certificates. If set, all DNS names (subject and alt) on child certs must be exact matches or subsets of the given domains (see https://tools.ietf.org/html/rfc5280#section-4.2.1.10).`,
226- // DisplayAttrs: &framework.DisplayAttributes{
227- // Name: "Permitted DNS Domains",
228- // },
229- // }
230-
231- // return fields
232- // }
0 commit comments