"description":"If 80, caucase will also listen on 443. Otherwise, caucase will listen on port and port + 1.",
"$ref":"#/definitions/tcpv4port"
"type":"integer",
},
{
"title":"http port to use",
"description":"Caucase http port to use.",
"default":8009
"default":8009
}
]
},
"server-https-port":{
"allOf":[
{
"$ref":"#/definitions/tcpv4port"
},
{
"title":"https port to use",
"description":"Caucase port to use for https connexion.",
"default":8010
}
]
},
},
"external-url":{
"external-url":{
"title":"External http url",
"title":"External URL of base port",
"description":"External http url which point to caucase on http. This url will be added in signed certificate as CRL distribution point URI",
"description":"When provided, this URL will be added to issued certificate as the CRL distribution point.",
"type":"string",
"type":"string",
"format":"uri"
"format":"uri"
},
},
"ca-subject":{
"service-auto-approve-amount":{
"title":"Subject of CA Certificate",
"title":"Number of service certificate requests to automatically approve",
"description":"CA certificate subject as string. The format is: /C=XX/ST=State/L=City/OU=OUnit/O=Company/CN=CA Auth/emailAddress=xx@example.com. Only /CN is mandatory.",
"description":"Once that number has been reached, a user must validate further requests. Renewals do not count toward this number. Cannot be changed once set.",
"description":"Number of pending csr to accept. If this limit is reached, no more csr will be accepted by the CA.",
"type":"integer",
"type":"integer",
"default":10
"default":0
},
},
"crt-life-time":{
"user-auto-approve-amount":{
"title":"Signed Certificate life time",
"title":"Number of user certificate requests to automatically approve",
"description":"The time in seconds before a generated certificate will expire. Default: 365*24*60*60 seconds (1 year)",
"description":"Once that number has been reached, a user must validate further requests. Renewals do not count toward this number. Cannot be changed once set.",
"type":"integer",
"type":"integer",
"default":31536000,
"default":1
"minimum":86400
},
"crl-life-period":{
"title":"CRL life time period",
"description":"Number of individual certificate validity periods during which the CRL is valid. Default: 1/50.0",
"type":"number",
"default":0.2
},
"ca-life-period":{
"title":"CA Certificate life period",
"description":"Number of individual certificate validity periods during which the CA certificate is valid. Default: 10",
"type":"number",
"default":10
},
"crt-keep-time":{
"title":"Time before cleanup certificate content on CA",
"description":"The time in seconds before a generated certificate will be deleted on CA server. Set 0 to never delete. Default: 30*24*60*60 seconds (30 days)",
"default":5184000,
"type":"integer"
},
},
"auto-sign-csr-amount":{
"key-length":{
"title":"Number of CSR to sign automatically",
"title":"Key length",
"description":"The number of CSR to sign automatically at startup. Has no effect if there is more than the specified value of csr submitted to caucase. This value should be as lowest as possible",
"description":"Size, in bits, of the SSL key generated to authenticate users.",
"description":"Periodicity of CRL update, in cron format. The CRL will be downloaded from caucase URL and the new content will be saved if there was a change. Everytime a new CRL is writen, Apache reload will be called.",
``caucase-eggs`` needs to be listed in ``parts=`` of the software buildout or referenced by another installed part.
.. note:: ``caucase-jinja2-library`` needs to be referenced in an installed section using ``slapos.recipe.template`` from software buildout to make macros available in the the context of instance buildout. From ``software.cfg``:
