Ra Request Queue Plugins - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

Chapter 5. Registration Authority
conn.ca1.servlet.revoke=/ca/subsystem/ca/doRevoke
conn.ca1.servlet.unrevoke=/ca/subsystem/ca/doUnrevoke
conn.ca1.servlet.addagent=/ca/admin/ca/registerRaUser
conn.ca1.timeout=100

5.2.4. RA Request Queue Plugins

Request Queue plugins are small Perl programs that the RA uses to perform certain tasks. These
plugins are located in /var/lib/rhpki-ra/lib/perl/PKI/Request/Plugin. The following
plugins are currently available:
PKI::Request::Plugin::CreatePin
Creates a one-time PIN for SCEP enrollment.
PKI::Request::Plugin::AutoAssign
Automatically assigns a request to a group of agents.
PKI::Request::Plugin::EmailNotification
Sends email notification.
PKI::Request::Plugin::RequestToCA
Sends an enrollment request to the CA.
Specifying which plugins to call
In the /var/lib/rhpki-ra/conf/CS.cfg file, the administrator can specify how the request
queue engine should react to the certificate signing request.
The following variables are currently available:
request.<request_type>.approve_request
Specifies which plugins to call when a request is approved.
request.<request_type>.cancel_request
Specifies which plugins to call when a request is canceled.
request.<request_type>.create_request
Specifies which plugins to call when a request is created.
For example, you may see the following for SCEP enrollment:
request.scep.approve_request.0.pinFormat=$site_id
request.scep.approve_request.0.plugin=PKI::Request::Plugin::CreatePin
request.scep.approve_request.num_plugins=1
request.scep.cancel_request.num_plugins=0
request.scep.create_request.0.assignTo=agents
request.scep.create_request.0.plugin=PKI::Request::Plugin::AutoAssign
request.scep.create_request.1.mailTo=nkwan@redhat.com
request.scep.create_request.1.plugin=PKI::Request::Plugin::EmailNotification
request.scep.create_request.1.templateDir=/usr/share/rhpki/ra/conf
request.scep.create_request.1.templateFile=mail_create_request.vm
request.scep.create_request.num_plugins=2
request.scep.profileId=caAgentServerCert
request.scep.reqType=pkcs10
142