Details
-
Type:
New Feature
-
Status: Closed
-
Priority:
Minor
-
Resolution: Duplicate
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: PKI core
-
Labels:
Description
We should add hooks that get called immediately after the pre-certificate generation in the generateCertificate method in X509CA. (And if the hook is being used, then we should force pre-cert generation, even if CT is not being used)
As far as I know CVC does not support pre-certificates in any form, so this will be for X509 only.
One use case is to perform validation on the certificate before it's issued.