www.pudn.com > ejbca_3_5_3(1).zip > xkms.properties.sample

#
# $Id: xkms.properties.sample,v 1.3 2007/01/05 05:35:50 herrvendil Exp $
#
# This is a sample file to override properties used
# during deployment of EJBCA
# 
# You should copy and rename this file to xkms.properties
# and customize at will.
#


#------------------- XKMS settings -------------

# Disable this (set to false) if you do not want to deploy the XKMS Service in EJBCA
# Default: true
#xkms.enabled=true

# Should signed XKMS request be required 
#
# Default: false
#xkms.request.requiresignature=false
 
# List of CA names that are accepted for XKMS signed requests
# Use ';' as a separate for multiple.
# Default: AdminCA1
#xkms.request.acceptedcas=AdminCA1
 
# Accept signed responses on request.
#
# Default: true
#xkms.response.acceptsignrequest=true

# Always sign responses
#
# Default: false
#xkms.response.alwayssign=false

# Specify which CA that should be used with the signed responses.
# Only one can be specified. Important, make sure the XKMS CA Service
# is activated in the edit ca page.
# Default: AdminCA1
#xkms.response.causedforsigning=AdminCA1 
 
# Setting specifying the keyusage in a X509 certificate that is mapped
# to XKMS KeyUsage Signature, Default is non-repudiation but if set to 
# false will XKMS KeyUsage Signature be mapped against digital 
# signature X509 key usage.
#
# Default: true
#xkms.keyusage.signatureisnonrep=true

# XKMS Service port
# This is a development setting that is set in the WSDL to
# instruct the client use a non default port. This is only needed
# if a WS tap listener is used to review the messages.
#xkms.serviceport=8080

# Setting indicating if a Proof Of Possesion element 
# is required for KRSS calls. 
#
# Default : true
#xkms.krss.poprequired=true

# Setting indicating the size of server generated keys
# used in the register method.
#
# Default : 1024
#xkms.krss.servergenkeylength=1024

# Defines if the end entity should be able to revoke his certificate
# using the revoke call and a revokaton code identifier
#
# Default : true
#xkms.krss.allowrevokation=true

# Defines if it should be possible to automatically issue a new certificate
# if the current one is valid and have a POP that verifies. In this case
# it isn't neccessary to set status to new and password authentication is
# ignored.
#
# Default : false
#xkms.krss.allowautomaticreissue=false