search

infamousjoeg / cyberark-aam-pkiaas

CyberArk AAM PKI-as-a-Service (CURRENTLY BETA)
Apache License 2.0
5 stars 0 forks source link

Add the ability to generate certificates and not store the certificates in the backend #117

Closed AndrewCopeland closed 4 years ago

AndrewCopeland commented 4 years ago

Is your feature request related to a problem? Please describe. Currently all created certificates are stored in the backend. In the case of short lived certificates it does not provide much value to store these certificates (since they could last only a couple of mins.) So it would be nice to specify on my Template if a certificate is stored or not stored in the backend.

Describe the solution you'd like Template should have a field called StoreCertificate. When creating a certificate if the templates field StoreCertificate is true then store certificate as we were doing before. If the field value is false then generate the certificate as we normally would but do not store it in the backend.

Additional context This should increase performance when dealing with short lived certificates since we can now issue certificates directly from followers.

AndrewCopeland commented 4 years ago

Not storing certificates to backend is now configurable via the template storeCertificate json attribute.