onvif
    Preparing search index...

    Interface KeystoreCapabilities

    The capabilities of a keystore implementation on a device.

    interface KeystoreCapabilities {
        anyElement?: anyElement;
        ECCKeyPairGeneration?: boolean;
        ellipticCurves?: EllipticCurves;
        enforceTLSWebClientAuthExtKeyUsage?: boolean;
        keyPairGeneration?: StringList;
        maximumNumberOfCertificates?: number;
        maximumNumberOfCertificationPaths?: number;
        maximumNumberOfCertificationPathValidationPolicies?: number;
        maximumNumberOfCRLs?: number;
        maximumNumberOfKeys?: number;
        maximumNumberOfPassphrases?: number;
        noPrivateKeySharing?: boolean;
        passwordBasedEncryptionAlgorithms?: PasswordBasedEncryptionAlgorithms;
        passwordBasedMACAlgorithms?: PasswordBasedMACAlgorithms;
        PKCS10?: boolean;
        PKCS10ExternalCertificationWithRSA?: boolean;
        PKCS12?: boolean;
        PKCS12CertificateWithRSAPrivateKeyUpload?: boolean;
        PKCS8?: boolean;
        PKCS8RSAKeyPairUpload?: boolean;
        RSAKeyLengths?: RSAKeyLengths;
        RSAKeyPairGeneration?: boolean;
        selfSignedCertificateCreation?: boolean;
        selfSignedCertificateCreationWithRSA?: boolean;
        setCertPath?: boolean;
        signatureAlgorithms?: AlgorithmIdentifier[];
        X509Versions?: X509Versions;
    }
    Index
    anyElement? ECCKeyPairGeneration? ellipticCurves? enforceTLSWebClientAuthExtKeyUsage? keyPairGeneration? maximumNumberOfCertificates? maximumNumberOfCertificationPaths? maximumNumberOfCertificationPathValidationPolicies? maximumNumberOfCRLs? maximumNumberOfKeys? maximumNumberOfPassphrases? noPrivateKeySharing? passwordBasedEncryptionAlgorithms? passwordBasedMACAlgorithms? PKCS10? PKCS10ExternalCertificationWithRSA? PKCS12? PKCS12CertificateWithRSAPrivateKeyUpload? PKCS8? PKCS8RSAKeyPairUpload? RSAKeyLengths? RSAKeyPairGeneration? selfSignedCertificateCreation? selfSignedCertificateCreationWithRSA? setCertPath? signatureAlgorithms? X509Versions?
    anyElement?: anyElement
    ECCKeyPairGeneration?: boolean

    Deprecated - Indication that the device supports on-board ECC key pair generation.

    ellipticCurves?: EllipticCurves

    Indicates which elliptic curves are supported by the device. Supported curve names can be found in the IANA TLS Supported Groups section, under the Description field.

    enforceTLSWebClientAuthExtKeyUsage?: boolean

    Indicates whether a device supports checking for the TLS WWW client auth extended key usage extension while validating certification paths.

    keyPairGeneration?: StringList

    List of supported key algorithm like 'RSA' and 'ECC'. For a full list of definitions see tas:KeyPairAlgorithm.

    maximumNumberOfCertificates?: number

    Indicates the maximum number of certificates that the device can store simultaneously.

    maximumNumberOfCertificationPaths?: number

    Indicates the maximum number of certification paths that the device can store simultaneously.

    maximumNumberOfCertificationPathValidationPolicies?: number

    Indicates the maximum number of certification path validation policies that the device is able to store simultaneously.

    maximumNumberOfCRLs?: number

    Indicates the maximum number of CRLs that the device is able to store simultaneously.

    maximumNumberOfKeys?: number

    Indicates the maximum number of keys that the device can store simultaneously.

    maximumNumberOfPassphrases?: number

    Indicates the maximum number of passphrases that the device is able to store simultaneously.

    noPrivateKeySharing?: boolean

    Indicates the device requires that each certificate with private key has its own unique key.

    passwordBasedEncryptionAlgorithms?: PasswordBasedEncryptionAlgorithms

    Indicates which password-based encryption algorithms are supported by the device.

    passwordBasedMACAlgorithms?: PasswordBasedMACAlgorithms

    Indicates which password-based MAC algorithms are supported by the device.

    PKCS10?: boolean

    Indicates support for creating PKCS#10 requests for keypairs and uploading the certificate obtained from a CA.

    PKCS10ExternalCertificationWithRSA?: boolean

    Deprecated - Indicates support for creating PKCS#10 requests for RSA keys and uploading the certificate obtained from a CA..

    PKCS12?: boolean

    Indicates support for uploading a certificate along with a private key in a PKCS#12 data structure.

    PKCS12CertificateWithRSAPrivateKeyUpload?: boolean

    Deprecated - Indicates support for uploading a certificate along with an RSA private key in a PKCS#12 data structure.

    PKCS8?: boolean

    Indicates support for uploading a key pair in a PKCS#8 data structure.

    PKCS8RSAKeyPairUpload?: boolean

    Deprecated - Indicates support for uploading an RSA key pair in a PKCS#8 data structure.

    RSAKeyLengths?: RSAKeyLengths

    Indicates which RSA key lengths are supported by the device.

    RSAKeyPairGeneration?: boolean

    Deprecated - Indication that the device supports on-board ECC key pair generation.

    selfSignedCertificateCreation?: boolean

    Indicates support for creating self-signed certificates.

    selfSignedCertificateCreationWithRSA?: boolean

    Deprecated - Indicates support for creating self-signed certificates for RSA keys.

    setCertPath?: boolean

    Indicates support for modifying an existing certification path or certification path validation policy.

    signatureAlgorithms?: AlgorithmIdentifier[]

    The signature algorithms supported by the keystore implementation.

    X509Versions?: X509Versions

    Indicates which X.509 versions are supported by the device.

    Settings
    Member Visibility

    On This Page
    Properties