f5-icontrol 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (253) hide show
  1. checksums.yaml +7 -0
  2. data/.gitignore +18 -0
  3. data/.travis.yml +5 -0
  4. data/Gemfile +4 -0
  5. data/LICENSE +9 -0
  6. data/LICENSE.txt +22 -0
  7. data/README.md +55 -0
  8. data/Rakefile +7 -0
  9. data/bin/f5 +6 -0
  10. data/f5-icontrol.gemspec +30 -0
  11. data/lib/f5/cli/application.rb +102 -0
  12. data/lib/f5/cli/config.rb +21 -0
  13. data/lib/f5/icontrol.rb +40 -0
  14. data/lib/f5/icontrol/local_lb/node_address_v2.rb +27 -0
  15. data/lib/f5/icontrol/local_lb/pool.rb +27 -0
  16. data/lib/f5/icontrol/system/system_info.rb +27 -0
  17. data/lib/f5/icontrol/version.rb +5 -0
  18. data/lib/wsdl/ASM.LoggingProfile.wsdl +1467 -0
  19. data/lib/wsdl/ASM.ObjectParams.wsdl +198 -0
  20. data/lib/wsdl/ASM.PSMProfile.wsdl +228 -0
  21. data/lib/wsdl/ASM.Policy.wsdl +3504 -0
  22. data/lib/wsdl/ASM.PolicyGroup.wsdl +389 -0
  23. data/lib/wsdl/ASM.SystemConfiguration.wsdl +730 -0
  24. data/lib/wsdl/ASM.WebApplication.wsdl +1138 -0
  25. data/lib/wsdl/ASM.WebApplicationGroup.wsdl +393 -0
  26. data/lib/wsdl/Classification.Application.wsdl +517 -0
  27. data/lib/wsdl/Classification.Category.wsdl +519 -0
  28. data/lib/wsdl/Classification.SignatureDefinition.wsdl +541 -0
  29. data/lib/wsdl/Classification.SignatureUpdateSchedule.wsdl +382 -0
  30. data/lib/wsdl/Classification.SignatureVersion.wsdl +233 -0
  31. data/lib/wsdl/GlobalLB.Application.wsdl +963 -0
  32. data/lib/wsdl/GlobalLB.DNSSECKey.wsdl +1642 -0
  33. data/lib/wsdl/GlobalLB.DNSSECZone.wsdl +825 -0
  34. data/lib/wsdl/GlobalLB.DataCenter.wsdl +7144 -0
  35. data/lib/wsdl/GlobalLB.Globals.wsdl +5513 -0
  36. data/lib/wsdl/GlobalLB.Link.wsdl +7654 -0
  37. data/lib/wsdl/GlobalLB.Monitor.wsdl +2228 -0
  38. data/lib/wsdl/GlobalLB.Pool.wsdl +9949 -0
  39. data/lib/wsdl/GlobalLB.PoolMember.wsdl +6939 -0
  40. data/lib/wsdl/GlobalLB.ProberPool.wsdl +7026 -0
  41. data/lib/wsdl/GlobalLB.Region.wsdl +560 -0
  42. data/lib/wsdl/GlobalLB.Rule.wsdl +6632 -0
  43. data/lib/wsdl/GlobalLB.Server.wsdl +8234 -0
  44. data/lib/wsdl/GlobalLB.Topology.wsdl +548 -0
  45. data/lib/wsdl/GlobalLB.VirtualServer.wsdl +6916 -0
  46. data/lib/wsdl/GlobalLB.VirtualServerV2.wsdl +7016 -0
  47. data/lib/wsdl/GlobalLB.WideIP.wsdl +8154 -0
  48. data/lib/wsdl/LTConfig.Class.wsdl +656 -0
  49. data/lib/wsdl/LTConfig.Field.wsdl +679 -0
  50. data/lib/wsdl/LocalLB.Class.wsdl +2153 -0
  51. data/lib/wsdl/LocalLB.DNSCache.wsdl +8380 -0
  52. data/lib/wsdl/LocalLB.DNSExpress.wsdl +6972 -0
  53. data/lib/wsdl/LocalLB.DNSGlobals.wsdl +457 -0
  54. data/lib/wsdl/LocalLB.DataGroupFile.wsdl +971 -0
  55. data/lib/wsdl/LocalLB.LSNPool.wsdl +7461 -0
  56. data/lib/wsdl/LocalLB.Monitor.wsdl +2214 -0
  57. data/lib/wsdl/LocalLB.NAT.wsdl +6413 -0
  58. data/lib/wsdl/LocalLB.NATV2.wsdl +6748 -0
  59. data/lib/wsdl/LocalLB.NodeAddress.wsdl +7143 -0
  60. data/lib/wsdl/LocalLB.NodeAddressV2.wsdl +7754 -0
  61. data/lib/wsdl/LocalLB.Pool.wsdl +11328 -0
  62. data/lib/wsdl/LocalLB.PoolMember.wsdl +7156 -0
  63. data/lib/wsdl/LocalLB.ProfileAnalytics.wsdl +5756 -0
  64. data/lib/wsdl/LocalLB.ProfileAuth.wsdl +6957 -0
  65. data/lib/wsdl/LocalLB.ProfileClassification.wsdl +370 -0
  66. data/lib/wsdl/LocalLB.ProfileClientSSL.wsdl +10232 -0
  67. data/lib/wsdl/LocalLB.ProfileDNS.wsdl +7723 -0
  68. data/lib/wsdl/LocalLB.ProfileDNSLogging.wsdl +852 -0
  69. data/lib/wsdl/LocalLB.ProfileDiameter.wsdl +8070 -0
  70. data/lib/wsdl/LocalLB.ProfileDiameterEndpoint.wsdl +7199 -0
  71. data/lib/wsdl/LocalLB.ProfileFTP.wsdl +6564 -0
  72. data/lib/wsdl/LocalLB.ProfileFastHttp.wsdl +7944 -0
  73. data/lib/wsdl/LocalLB.ProfileFastL4.wsdl +8235 -0
  74. data/lib/wsdl/LocalLB.ProfileHttp.wsdl +12256 -0
  75. data/lib/wsdl/LocalLB.ProfileHttpClass.wsdl +7414 -0
  76. data/lib/wsdl/LocalLB.ProfileHttpCompression.wsdl +8166 -0
  77. data/lib/wsdl/LocalLB.ProfileICAP.wsdl +6917 -0
  78. data/lib/wsdl/LocalLB.ProfileIIOP.wsdl +6726 -0
  79. data/lib/wsdl/LocalLB.ProfileOneConnect.wsdl +6784 -0
  80. data/lib/wsdl/LocalLB.ProfilePersistence.wsdl +2740 -0
  81. data/lib/wsdl/LocalLB.ProfileRADIUS.wsdl +6696 -0
  82. data/lib/wsdl/LocalLB.ProfileRTSP.wsdl +7424 -0
  83. data/lib/wsdl/LocalLB.ProfileRequestAdapt.wsdl +7041 -0
  84. data/lib/wsdl/LocalLB.ProfileRequestLogging.wsdl +2042 -0
  85. data/lib/wsdl/LocalLB.ProfileResponseAdapt.wsdl +7041 -0
  86. data/lib/wsdl/LocalLB.ProfileSCTP.wsdl +7887 -0
  87. data/lib/wsdl/LocalLB.ProfileSIP.wsdl +7866 -0
  88. data/lib/wsdl/LocalLB.ProfileSPDY.wsdl +7489 -0
  89. data/lib/wsdl/LocalLB.ProfileSPM.wsdl +953 -0
  90. data/lib/wsdl/LocalLB.ProfileServerSSL.wsdl +9566 -0
  91. data/lib/wsdl/LocalLB.ProfileStream.wsdl +6561 -0
  92. data/lib/wsdl/LocalLB.ProfileTCP.wsdl +9869 -0
  93. data/lib/wsdl/LocalLB.ProfileUDP.wsdl +6948 -0
  94. data/lib/wsdl/LocalLB.ProfileUserStatistic.wsdl +916 -0
  95. data/lib/wsdl/LocalLB.ProfileWebAcceleration.wsdl +8213 -0
  96. data/lib/wsdl/LocalLB.ProfileXML.wsdl +7022 -0
  97. data/lib/wsdl/LocalLB.RAMCacheInformation.wsdl +372 -0
  98. data/lib/wsdl/LocalLB.RateClass.wsdl +9480 -0
  99. data/lib/wsdl/LocalLB.Rule.wsdl +7033 -0
  100. data/lib/wsdl/LocalLB.SNAT.wsdl +7262 -0
  101. data/lib/wsdl/LocalLB.SNATPool.wsdl +6606 -0
  102. data/lib/wsdl/LocalLB.SNATPoolMember.wsdl +5960 -0
  103. data/lib/wsdl/LocalLB.SNATTranslationAddress.wsdl +6599 -0
  104. data/lib/wsdl/LocalLB.SNATTranslationAddressV2.wsdl +6760 -0
  105. data/lib/wsdl/LocalLB.VirtualAddress.wsdl +6676 -0
  106. data/lib/wsdl/LocalLB.VirtualAddressV2.wsdl +7539 -0
  107. data/lib/wsdl/LocalLB.VirtualServer.wsdl +14758 -0
  108. data/lib/wsdl/LocalLB.iFile.wsdl +302 -0
  109. data/lib/wsdl/LocalLB.iFileFile.wsdl +712 -0
  110. data/lib/wsdl/Log.DestinationArcSight.wsdl +377 -0
  111. data/lib/wsdl/Log.DestinationLocalSyslog.wsdl +469 -0
  112. data/lib/wsdl/Log.DestinationRemoteHighSpeedLog.wsdl +486 -0
  113. data/lib/wsdl/Log.DestinationRemoteSyslog.wsdl +751 -0
  114. data/lib/wsdl/Log.DestinationSplunk.wsdl +377 -0
  115. data/lib/wsdl/Log.Filter.wsdl +1175 -0
  116. data/lib/wsdl/Log.Publisher.wsdl +448 -0
  117. data/lib/wsdl/Management.ApplicationPresentationScript.wsdl +698 -0
  118. data/lib/wsdl/Management.ApplicationService.wsdl +1804 -0
  119. data/lib/wsdl/Management.ApplicationTemplate.wsdl +1323 -0
  120. data/lib/wsdl/Management.CCLDAPConfiguration.wsdl +1637 -0
  121. data/lib/wsdl/Management.CLIScript.wsdl +684 -0
  122. data/lib/wsdl/Management.CRLDPConfiguration.wsdl +763 -0
  123. data/lib/wsdl/Management.CRLDPServer.wsdl +626 -0
  124. data/lib/wsdl/Management.CertLDAPConfiguration.wsdl +2453 -0
  125. data/lib/wsdl/Management.ChangeControl.wsdl +735 -0
  126. data/lib/wsdl/Management.DBVariable.wsdl +352 -0
  127. data/lib/wsdl/Management.Device.wsdl +1697 -0
  128. data/lib/wsdl/Management.DeviceGroup.wsdl +1241 -0
  129. data/lib/wsdl/Management.EM.wsdl +456 -0
  130. data/lib/wsdl/Management.EventNotification.wsdl +1031 -0
  131. data/lib/wsdl/Management.EventSubscription.wsdl +1542 -0
  132. data/lib/wsdl/Management.FeatureModule.wsdl +424 -0
  133. data/lib/wsdl/Management.Folder.wsdl +635 -0
  134. data/lib/wsdl/Management.Globals.wsdl +166 -0
  135. data/lib/wsdl/Management.KeyCertificate.wsdl +2027 -0
  136. data/lib/wsdl/Management.LDAPConfiguration.wsdl +2645 -0
  137. data/lib/wsdl/Management.LicenseAdministration.wsdl +906 -0
  138. data/lib/wsdl/Management.Named.wsdl +740 -0
  139. data/lib/wsdl/Management.OCSPConfiguration.wsdl +447 -0
  140. data/lib/wsdl/Management.OCSPResponder.wsdl +2370 -0
  141. data/lib/wsdl/Management.Partition.wsdl +545 -0
  142. data/lib/wsdl/Management.Provision.wsdl +743 -0
  143. data/lib/wsdl/Management.RADIUSConfiguration.wsdl +951 -0
  144. data/lib/wsdl/Management.RADIUSServer.wsdl +602 -0
  145. data/lib/wsdl/Management.ResourceRecord.wsdl +2168 -0
  146. data/lib/wsdl/Management.SFlowDataSource.wsdl +776 -0
  147. data/lib/wsdl/Management.SFlowGlobals.wsdl +826 -0
  148. data/lib/wsdl/Management.SFlowReceiver.wsdl +694 -0
  149. data/lib/wsdl/Management.SMTPConfiguration.wsdl +854 -0
  150. data/lib/wsdl/Management.SNMPConfiguration.wsdl +4672 -0
  151. data/lib/wsdl/Management.TACACSConfiguration.wsdl +943 -0
  152. data/lib/wsdl/Management.TMOSModule.wsdl +309 -0
  153. data/lib/wsdl/Management.TrafficGroup.wsdl +953 -0
  154. data/lib/wsdl/Management.Trust.wsdl +703 -0
  155. data/lib/wsdl/Management.UserManagement.wsdl +1693 -0
  156. data/lib/wsdl/Management.View.wsdl +381 -0
  157. data/lib/wsdl/Management.Zone.wsdl +528 -0
  158. data/lib/wsdl/Management.ZoneRunner.wsdl +206 -0
  159. data/lib/wsdl/Networking.ARP.wsdl +776 -0
  160. data/lib/wsdl/Networking.AdminIP.wsdl +864 -0
  161. data/lib/wsdl/Networking.BWControllerPolicy.wsdl +1107 -0
  162. data/lib/wsdl/Networking.IPsecIkeDaemon.wsdl +368 -0
  163. data/lib/wsdl/Networking.IPsecIkePeer.wsdl +2701 -0
  164. data/lib/wsdl/Networking.IPsecManualSecurityAssociation.wsdl +1146 -0
  165. data/lib/wsdl/Networking.IPsecPolicy.wsdl +1380 -0
  166. data/lib/wsdl/Networking.IPsecTrafficSelector.wsdl +1104 -0
  167. data/lib/wsdl/Networking.Interfaces.wsdl +8359 -0
  168. data/lib/wsdl/Networking.LLDPGlobals.wsdl +590 -0
  169. data/lib/wsdl/Networking.PacketFilter.wsdl +6728 -0
  170. data/lib/wsdl/Networking.PacketFilterGlobals.wsdl +926 -0
  171. data/lib/wsdl/Networking.PortMirror.wsdl +373 -0
  172. data/lib/wsdl/Networking.ProfileFEC.wsdl +1350 -0
  173. data/lib/wsdl/Networking.ProfileGRE.wsdl +645 -0
  174. data/lib/wsdl/Networking.ProfileIPIP.wsdl +695 -0
  175. data/lib/wsdl/Networking.ProfileVXLAN.wsdl +563 -0
  176. data/lib/wsdl/Networking.ProfileWCCPGRE.wsdl +841 -0
  177. data/lib/wsdl/Networking.RouteDomain.wsdl +646 -0
  178. data/lib/wsdl/Networking.RouteDomainV2.wsdl +10056 -0
  179. data/lib/wsdl/Networking.RouteTable.wsdl +1209 -0
  180. data/lib/wsdl/Networking.RouteTableV2.wsdl +1531 -0
  181. data/lib/wsdl/Networking.RouterAdvertisement.wsdl +1067 -0
  182. data/lib/wsdl/Networking.STPGlobals.wsdl +796 -0
  183. data/lib/wsdl/Networking.STPInstance.wsdl +1147 -0
  184. data/lib/wsdl/Networking.STPInstanceV2.wsdl +1232 -0
  185. data/lib/wsdl/Networking.SelfIP.wsdl +557 -0
  186. data/lib/wsdl/Networking.SelfIPPortLockdown.wsdl +421 -0
  187. data/lib/wsdl/Networking.SelfIPV2.wsdl +10077 -0
  188. data/lib/wsdl/Networking.Trunk.wsdl +7133 -0
  189. data/lib/wsdl/Networking.Tunnel.wsdl +1354 -0
  190. data/lib/wsdl/Networking.VLAN.wsdl +2215 -0
  191. data/lib/wsdl/Networking.VLANGroup.wsdl +1441 -0
  192. data/lib/wsdl/Networking.iSessionAdvertisedRoute.wsdl +491 -0
  193. data/lib/wsdl/Networking.iSessionAdvertisedRouteV2.wsdl +619 -0
  194. data/lib/wsdl/Networking.iSessionDatastor.wsdl +459 -0
  195. data/lib/wsdl/Networking.iSessionDeduplication.wsdl +401 -0
  196. data/lib/wsdl/Networking.iSessionLocalInterface.wsdl +922 -0
  197. data/lib/wsdl/Networking.iSessionPeerDiscovery.wsdl +818 -0
  198. data/lib/wsdl/Networking.iSessionRemoteInterface.wsdl +1100 -0
  199. data/lib/wsdl/Networking.iSessionRemoteInterfaceV2.wsdl +1307 -0
  200. data/lib/wsdl/PEM.FormatScript.wsdl +542 -0
  201. data/lib/wsdl/PEM.ForwardingEndpoint.wsdl +849 -0
  202. data/lib/wsdl/PEM.InterceptionEndpoint.wsdl +414 -0
  203. data/lib/wsdl/PEM.Listener.wsdl +495 -0
  204. data/lib/wsdl/PEM.Policy.wsdl +4097 -0
  205. data/lib/wsdl/PEM.ServiceChainEndpoint.wsdl +762 -0
  206. data/lib/wsdl/PEM.Subscriber.wsdl +6527 -0
  207. data/lib/wsdl/Security.DoSDevice.wsdl +6670 -0
  208. data/lib/wsdl/Security.FirewallAddressList.wsdl +542 -0
  209. data/lib/wsdl/Security.FirewallGlobalAdminIPRuleList.wsdl +8891 -0
  210. data/lib/wsdl/Security.FirewallGlobalRuleList.wsdl +9171 -0
  211. data/lib/wsdl/Security.FirewallPolicy.wsdl +9355 -0
  212. data/lib/wsdl/Security.FirewallPortList.wsdl +544 -0
  213. data/lib/wsdl/Security.FirewallRuleList.wsdl +3360 -0
  214. data/lib/wsdl/Security.FirewallWeeklySchedule.wsdl +825 -0
  215. data/lib/wsdl/Security.LogProfile.wsdl +6927 -0
  216. data/lib/wsdl/Security.ProfileDNSSecurity.wsdl +6881 -0
  217. data/lib/wsdl/Security.ProfileDoS.wsdl +10389 -0
  218. data/lib/wsdl/Security.ProfileIPIntelligence.wsdl +7154 -0
  219. data/lib/wsdl/System.CertificateRevocationListFile.wsdl +840 -0
  220. data/lib/wsdl/System.Cluster.wsdl +956 -0
  221. data/lib/wsdl/System.ConfigSync.wsdl +1289 -0
  222. data/lib/wsdl/System.Connections.wsdl +497 -0
  223. data/lib/wsdl/System.Disk.wsdl +1442 -0
  224. data/lib/wsdl/System.ExternalMonitorFile.wsdl +834 -0
  225. data/lib/wsdl/System.Failover.wsdl +539 -0
  226. data/lib/wsdl/System.GeoIP.wsdl +181 -0
  227. data/lib/wsdl/System.HAGroup.wsdl +1983 -0
  228. data/lib/wsdl/System.HAStatus.wsdl +695 -0
  229. data/lib/wsdl/System.Inet.wsdl +438 -0
  230. data/lib/wsdl/System.Internal.wsdl +279 -0
  231. data/lib/wsdl/System.PerformanceSFlow.wsdl +722 -0
  232. data/lib/wsdl/System.Services.wsdl +1054 -0
  233. data/lib/wsdl/System.Session.wsdl +1023 -0
  234. data/lib/wsdl/System.SoftwareManagement.wsdl +1073 -0
  235. data/lib/wsdl/System.Statistics.wsdl +9469 -0
  236. data/lib/wsdl/System.SystemInfo.wsdl +7493 -0
  237. data/lib/wsdl/System.VCMP.wsdl +7766 -0
  238. data/lib/wsdl/WebAccelerator.Applications.wsdl +7765 -0
  239. data/lib/wsdl/WebAccelerator.Policies.wsdl +570 -0
  240. data/lib/wsdl/WebAccelerator.ProxyMessage.wsdl +157 -0
  241. data/lib/wsdl/iCall.PeriodicHandler.wsdl +751 -0
  242. data/lib/wsdl/iCall.PerpetualHandler.wsdl +1081 -0
  243. data/lib/wsdl/iCall.Script.wsdl +372 -0
  244. data/lib/wsdl/iCall.TriggeredHandler.wsdl +1071 -0
  245. data/metadata +323 -0
  246. data/spec/cassettes/F5_Icontrol_LocalLB_Pool/creates_a_pool.yml +49 -0
  247. data/spec/cassettes/F5_Icontrol_System_SystemInfo/retrieves_something_with_a_complex_return_type_and_input.yml +49 -0
  248. data/spec/cassettes/F5_Icontrol_System_SystemInfo/retrieves_the_uptime.yml +96 -0
  249. data/spec/cassettes/F5_Icontrol_System_SystemInfo/retrieves_the_version.yml +99 -0
  250. data/spec/models/local_lb/pool_spec.rb +26 -0
  251. data/spec/models/system/system_info_spec.rb +31 -0
  252. data/spec/spec_helper.rb +13 -0
  253. metadata +415 -0
data/lib/wsdl/Management.OCSPConfiguration.wsdl ADDED
@@ -0,0 +1,447 @@
1
+ <?xml version="1.0" ?>
2
+ <!--
3
+ Copyright (c) 1996-2013, F5 Networks, Inc., Seattle, Washington. All rights reserved.
4
+
5
+ F5, F5 Networks, the F5 logo, BIG-IP, 3-DNS, iControl, GLOBAL-SITE, SEE-IT, EDGE-FX, FireGuard, Internet Control Architecture, IP Application Switch, iRules, PACKET VELOCITY, SYN Check, CONTROL YOUR WORLD, OneConnect, ZoneRunner, uRoam, FirePass, and TrafficShield are registered trademarks or trademarks of F5 Networks, Inc., in the U.S. and certain other countries.
6
+
7
+ All other trademarks mentioned in this document are the property of their respective owners. F5 Networks' trademarks may not be used in connection with any product or service except as permitted in writing by F5.
8
+
9
+ -->
10
+ <definitions name="Management.OCSPConfiguration"
11
+ targetNamespace="urn:iControl"
12
+ xmlns:tns="urn:iControl"
13
+ xmlns:xsd="http://www.w3.org/2001/XMLSchema"
14
+ xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
15
+ xmlns="http://schemas.xmlsoap.org/wsdl/">
16
+
17
+ <!-- types -->
18
+
19
+ <types>
20
+ <xsd:schema targetNamespace='urn:iControl'
21
+ xmlns='http://www.w3.org/2001/XMLSchema'
22
+ xmlns:SOAP-ENC='http://schemas.xmlsoap.org/soap/encoding/'
23
+ xmlns:wsdl='http://schemas.xmlsoap.org/wsdl/'>
24
+ <xsd:complexType name="Common.StringSequence">
25
+ <xsd:complexContent>
26
+ <xsd:restriction base='SOAP-ENC:Array'>
27
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='xsd:string[]'/>
28
+ </xsd:restriction>
29
+ </xsd:complexContent>
30
+ </xsd:complexType>
31
+ <xsd:complexType name="Common.StringSequenceSequence">
32
+ <xsd:complexContent>
33
+ <xsd:restriction base='SOAP-ENC:Array'>
34
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='tns:Common.StringSequence[]'/>
35
+ </xsd:restriction>
36
+ </xsd:complexContent>
37
+ </xsd:complexType>
38
+ </xsd:schema>
39
+ </types>
40
+
41
+ <!-- message -->
42
+
43
+ <message name="Management.OCSPConfiguration.get_listRequest">
44
+ </message>
45
+ <message name="Management.OCSPConfiguration.get_listResponse">
46
+ <part name="return" type="tns:Common.StringSequence"/>
47
+ </message>
48
+
49
+ <message name="Management.OCSPConfiguration.createRequest">
50
+ <part name="config_names" type="tns:Common.StringSequence"/>
51
+ <part name="responders" type="tns:Common.StringSequenceSequence"/>
52
+ </message>
53
+ <message name="Management.OCSPConfiguration.createResponse">
54
+ </message>
55
+
56
+ <message name="Management.OCSPConfiguration.delete_configurationRequest">
57
+ <part name="config_names" type="tns:Common.StringSequence"/>
58
+ </message>
59
+ <message name="Management.OCSPConfiguration.delete_configurationResponse">
60
+ </message>
61
+
62
+ <message name="Management.OCSPConfiguration.delete_all_configurationsRequest">
63
+ </message>
64
+ <message name="Management.OCSPConfiguration.delete_all_configurationsResponse">
65
+ </message>
66
+
67
+ <message name="Management.OCSPConfiguration.get_responderRequest">
68
+ <part name="config_names" type="tns:Common.StringSequence"/>
69
+ </message>
70
+ <message name="Management.OCSPConfiguration.get_responderResponse">
71
+ <part name="return" type="tns:Common.StringSequenceSequence"/>
72
+ </message>
73
+
74
+ <message name="Management.OCSPConfiguration.add_responderRequest">
75
+ <part name="config_names" type="tns:Common.StringSequence"/>
76
+ <part name="responders" type="tns:Common.StringSequenceSequence"/>
77
+ </message>
78
+ <message name="Management.OCSPConfiguration.add_responderResponse">
79
+ </message>
80
+
81
+ <message name="Management.OCSPConfiguration.remove_responderRequest">
82
+ <part name="config_names" type="tns:Common.StringSequence"/>
83
+ <part name="responders" type="tns:Common.StringSequenceSequence"/>
84
+ </message>
85
+ <message name="Management.OCSPConfiguration.remove_responderResponse">
86
+ </message>
87
+
88
+ <message name="Management.OCSPConfiguration.remove_all_respondersRequest">
89
+ <part name="config_names" type="tns:Common.StringSequence"/>
90
+ </message>
91
+ <message name="Management.OCSPConfiguration.remove_all_respondersResponse">
92
+ </message>
93
+
94
+ <message name="Management.OCSPConfiguration.set_descriptionRequest">
95
+ <part name="config_names" type="tns:Common.StringSequence"/>
96
+ <part name="descriptions" type="tns:Common.StringSequence"/>
97
+ </message>
98
+ <message name="Management.OCSPConfiguration.set_descriptionResponse">
99
+ </message>
100
+
101
+ <message name="Management.OCSPConfiguration.get_descriptionRequest">
102
+ <part name="config_names" type="tns:Common.StringSequence"/>
103
+ </message>
104
+ <message name="Management.OCSPConfiguration.get_descriptionResponse">
105
+ <part name="return" type="tns:Common.StringSequence"/>
106
+ </message>
107
+
108
+ <message name="Management.OCSPConfiguration.get_versionRequest">
109
+ </message>
110
+ <message name="Management.OCSPConfiguration.get_versionResponse">
111
+ <part name="return" type="xsd:string"/>
112
+ </message>
113
+
114
+ <!-- portType -->
115
+
116
+ <portType name="Management.OCSPConfigurationPortType">
117
+ <operation name="get_list">
118
+ <documentation>
119
+ Gets a list of all OCSP configurations.
120
+
121
+ </documentation>
122
+ <input message="tns:Management.OCSPConfiguration.get_listRequest"/>
123
+ <output message="tns:Management.OCSPConfiguration.get_listResponse"/>
124
+ </operation>
125
+ <operation name="create">
126
+ <documentation>
127
+ Creates the specified OCSP configurations.
128
+
129
+ </documentation>
130
+ <input message="tns:Management.OCSPConfiguration.createRequest"/>
131
+ <output message="tns:Management.OCSPConfiguration.createResponse"/>
132
+ </operation>
133
+ <operation name="delete_configuration">
134
+ <documentation>
135
+ Deletes the specified OCSP configurations.
136
+
137
+ </documentation>
138
+ <input message="tns:Management.OCSPConfiguration.delete_configurationRequest"/>
139
+ <output message="tns:Management.OCSPConfiguration.delete_configurationResponse"/>
140
+ </operation>
141
+ <operation name="delete_all_configurations">
142
+ <documentation>
143
+ Deletes all OCSP configurations.
144
+
145
+ </documentation>
146
+ <input message="tns:Management.OCSPConfiguration.delete_all_configurationsRequest"/>
147
+ <output message="tns:Management.OCSPConfiguration.delete_all_configurationsResponse"/>
148
+ </operation>
149
+ <operation name="get_responder">
150
+ <documentation>
151
+ Gets the lists of responders the specified OCSP configurations are associated with.
152
+
153
+ </documentation>
154
+ <input message="tns:Management.OCSPConfiguration.get_responderRequest"/>
155
+ <output message="tns:Management.OCSPConfiguration.get_responderResponse"/>
156
+ </operation>
157
+ <operation name="add_responder">
158
+ <documentation>
159
+ Adds/associates responders to the specified OCSP configurations.
160
+
161
+ </documentation>
162
+ <input message="tns:Management.OCSPConfiguration.add_responderRequest"/>
163
+ <output message="tns:Management.OCSPConfiguration.add_responderResponse"/>
164
+ </operation>
165
+ <operation name="remove_responder">
166
+ <documentation>
167
+ Removes responders from the specified OCSP configurations.
168
+
169
+ </documentation>
170
+ <input message="tns:Management.OCSPConfiguration.remove_responderRequest"/>
171
+ <output message="tns:Management.OCSPConfiguration.remove_responderResponse"/>
172
+ </operation>
173
+ <operation name="remove_all_responders">
174
+ <documentation>
175
+ Removes all responders from the specified OCSP configurations.
176
+
177
+ </documentation>
178
+ <input message="tns:Management.OCSPConfiguration.remove_all_respondersRequest"/>
179
+ <output message="tns:Management.OCSPConfiguration.remove_all_respondersResponse"/>
180
+ </operation>
181
+ <operation name="set_description">
182
+ <documentation>
183
+ Sets the description for a set of OCSP configurations.
184
+
185
+ This is an arbitrary field which can be used for any purpose.
186
+
187
+ </documentation>
188
+ <input message="tns:Management.OCSPConfiguration.set_descriptionRequest"/>
189
+ <output message="tns:Management.OCSPConfiguration.set_descriptionResponse"/>
190
+ </operation>
191
+ <operation name="get_description">
192
+ <documentation>
193
+ Gets the descriptions for a set of OCSP configurations.
194
+
195
+ </documentation>
196
+ <input message="tns:Management.OCSPConfiguration.get_descriptionRequest"/>
197
+ <output message="tns:Management.OCSPConfiguration.get_descriptionResponse"/>
198
+ </operation>
199
+ <operation name="get_version">
200
+ <documentation>
201
+ Gets the version information for this interface.
202
+
203
+ </documentation>
204
+ <input message="tns:Management.OCSPConfiguration.get_versionRequest"/>
205
+ <output message="tns:Management.OCSPConfiguration.get_versionResponse"/>
206
+ </operation>
207
+ </portType>
208
+
209
+ <!-- binding -->
210
+
211
+ <binding name="Management.OCSPConfigurationBinding" type="tns:Management.OCSPConfigurationPortType">
212
+ <soap:binding style="rpc" transport="http://schemas.xmlsoap.org/soap/http"/>
213
+ <operation name="get_list">
214
+ <documentation>
215
+ Gets a list of all OCSP configurations.
216
+
217
+ </documentation>
218
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
219
+ <input>
220
+ <soap:body
221
+ use="encoded"
222
+ namespace="urn:iControl:Management/OCSPConfiguration"
223
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
224
+ </input>
225
+ <output>
226
+ <soap:body
227
+ use="encoded"
228
+ namespace="urn:iControl:Management/OCSPConfiguration"
229
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
230
+ </output>
231
+ </operation>
232
+
233
+ <operation name="create">
234
+ <documentation>
235
+ Creates the specified OCSP configurations.
236
+
237
+ </documentation>
238
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
239
+ <input>
240
+ <soap:body
241
+ use="encoded"
242
+ namespace="urn:iControl:Management/OCSPConfiguration"
243
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
244
+ </input>
245
+ <output>
246
+ <soap:body
247
+ use="encoded"
248
+ namespace="urn:iControl:Management/OCSPConfiguration"
249
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
250
+ </output>
251
+ </operation>
252
+
253
+ <operation name="delete_configuration">
254
+ <documentation>
255
+ Deletes the specified OCSP configurations.
256
+
257
+ </documentation>
258
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
259
+ <input>
260
+ <soap:body
261
+ use="encoded"
262
+ namespace="urn:iControl:Management/OCSPConfiguration"
263
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
264
+ </input>
265
+ <output>
266
+ <soap:body
267
+ use="encoded"
268
+ namespace="urn:iControl:Management/OCSPConfiguration"
269
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
270
+ </output>
271
+ </operation>
272
+
273
+ <operation name="delete_all_configurations">
274
+ <documentation>
275
+ Deletes all OCSP configurations.
276
+
277
+ </documentation>
278
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
279
+ <input>
280
+ <soap:body
281
+ use="encoded"
282
+ namespace="urn:iControl:Management/OCSPConfiguration"
283
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
284
+ </input>
285
+ <output>
286
+ <soap:body
287
+ use="encoded"
288
+ namespace="urn:iControl:Management/OCSPConfiguration"
289
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
290
+ </output>
291
+ </operation>
292
+
293
+ <operation name="get_responder">
294
+ <documentation>
295
+ Gets the lists of responders the specified OCSP configurations are associated with.
296
+
297
+ </documentation>
298
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
299
+ <input>
300
+ <soap:body
301
+ use="encoded"
302
+ namespace="urn:iControl:Management/OCSPConfiguration"
303
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
304
+ </input>
305
+ <output>
306
+ <soap:body
307
+ use="encoded"
308
+ namespace="urn:iControl:Management/OCSPConfiguration"
309
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
310
+ </output>
311
+ </operation>
312
+
313
+ <operation name="add_responder">
314
+ <documentation>
315
+ Adds/associates responders to the specified OCSP configurations.
316
+
317
+ </documentation>
318
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
319
+ <input>
320
+ <soap:body
321
+ use="encoded"
322
+ namespace="urn:iControl:Management/OCSPConfiguration"
323
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
324
+ </input>
325
+ <output>
326
+ <soap:body
327
+ use="encoded"
328
+ namespace="urn:iControl:Management/OCSPConfiguration"
329
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
330
+ </output>
331
+ </operation>
332
+
333
+ <operation name="remove_responder">
334
+ <documentation>
335
+ Removes responders from the specified OCSP configurations.
336
+
337
+ </documentation>
338
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
339
+ <input>
340
+ <soap:body
341
+ use="encoded"
342
+ namespace="urn:iControl:Management/OCSPConfiguration"
343
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
344
+ </input>
345
+ <output>
346
+ <soap:body
347
+ use="encoded"
348
+ namespace="urn:iControl:Management/OCSPConfiguration"
349
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
350
+ </output>
351
+ </operation>
352
+
353
+ <operation name="remove_all_responders">
354
+ <documentation>
355
+ Removes all responders from the specified OCSP configurations.
356
+
357
+ </documentation>
358
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
359
+ <input>
360
+ <soap:body
361
+ use="encoded"
362
+ namespace="urn:iControl:Management/OCSPConfiguration"
363
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
364
+ </input>
365
+ <output>
366
+ <soap:body
367
+ use="encoded"
368
+ namespace="urn:iControl:Management/OCSPConfiguration"
369
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
370
+ </output>
371
+ </operation>
372
+
373
+ <operation name="set_description">
374
+ <documentation>
375
+ Sets the description for a set of OCSP configurations.
376
+
377
+ This is an arbitrary field which can be used for any purpose.
378
+
379
+ </documentation>
380
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
381
+ <input>
382
+ <soap:body
383
+ use="encoded"
384
+ namespace="urn:iControl:Management/OCSPConfiguration"
385
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
386
+ </input>
387
+ <output>
388
+ <soap:body
389
+ use="encoded"
390
+ namespace="urn:iControl:Management/OCSPConfiguration"
391
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
392
+ </output>
393
+ </operation>
394
+
395
+ <operation name="get_description">
396
+ <documentation>
397
+ Gets the descriptions for a set of OCSP configurations.
398
+
399
+ </documentation>
400
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
401
+ <input>
402
+ <soap:body
403
+ use="encoded"
404
+ namespace="urn:iControl:Management/OCSPConfiguration"
405
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
406
+ </input>
407
+ <output>
408
+ <soap:body
409
+ use="encoded"
410
+ namespace="urn:iControl:Management/OCSPConfiguration"
411
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
412
+ </output>
413
+ </operation>
414
+
415
+ <operation name="get_version">
416
+ <documentation>
417
+ Gets the version information for this interface.
418
+
419
+ </documentation>
420
+ <soap:operation soapAction="urn:iControl:Management/OCSPConfiguration"/>
421
+ <input>
422
+ <soap:body
423
+ use="encoded"
424
+ namespace="urn:iControl:Management/OCSPConfiguration"
425
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
426
+ </input>
427
+ <output>
428
+ <soap:body
429
+ use="encoded"
430
+ namespace="urn:iControl:Management/OCSPConfiguration"
431
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
432
+ </output>
433
+ </operation>
434
+ </binding>
435
+
436
+ <!-- service -->
437
+
438
+ <service name="Management.OCSPConfiguration">
439
+ <documentation>
440
+ The OCSPConfiguration interface enables you to manage OCSP PAM configuration.
441
+
442
+ </documentation>
443
+ <port name="Management.OCSPConfigurationPort" binding="tns:Management.OCSPConfigurationBinding">
444
+ <soap:address location="https://url_to_service"/>
445
+ </port>
446
+ </service>
447
+ </definitions>
data/lib/wsdl/Management.OCSPResponder.wsdl ADDED
@@ -0,0 +1,2370 @@
1
+ <?xml version="1.0" ?>
2
+ <!--
3
+ Copyright (c) 1996-2013, F5 Networks, Inc., Seattle, Washington. All rights reserved.
4
+
5
+ F5, F5 Networks, the F5 logo, BIG-IP, 3-DNS, iControl, GLOBAL-SITE, SEE-IT, EDGE-FX, FireGuard, Internet Control Architecture, IP Application Switch, iRules, PACKET VELOCITY, SYN Check, CONTROL YOUR WORLD, OneConnect, ZoneRunner, uRoam, FirePass, and TrafficShield are registered trademarks or trademarks of F5 Networks, Inc., in the U.S. and certain other countries.
6
+
7
+ All other trademarks mentioned in this document are the property of their respective owners. F5 Networks' trademarks may not be used in connection with any product or service except as permitted in writing by F5.
8
+
9
+ -->
10
+ <definitions name="Management.OCSPResponder"
11
+ targetNamespace="urn:iControl"
12
+ xmlns:tns="urn:iControl"
13
+ xmlns:xsd="http://www.w3.org/2001/XMLSchema"
14
+ xmlns:soap="http://schemas.xmlsoap.org/wsdl/soap/"
15
+ xmlns="http://schemas.xmlsoap.org/wsdl/">
16
+
17
+ <!-- types -->
18
+
19
+ <types>
20
+ <xsd:schema targetNamespace='urn:iControl'
21
+ xmlns='http://www.w3.org/2001/XMLSchema'
22
+ xmlns:SOAP-ENC='http://schemas.xmlsoap.org/soap/encoding/'
23
+ xmlns:wsdl='http://schemas.xmlsoap.org/wsdl/'>
24
+ <xsd:simpleType name="Management.OCSPDigestMethod">
25
+ <xsd:restriction base="xsd:string">
26
+ <xsd:enumeration value="OCSP_DIGEST_METHOD_SHA1">
27
+ <xsd:annotation>
28
+ <xsd:documentation>OCSP_DIGEST_METHOD_SHA1</xsd:documentation>
29
+ </xsd:annotation>
30
+ </xsd:enumeration>
31
+ <xsd:enumeration value="OCSP_DIGEST_METHOD_MD5">
32
+ <xsd:annotation>
33
+ <xsd:documentation>OCSP_DIGEST_METHOD_MD5</xsd:documentation>
34
+ </xsd:annotation>
35
+ </xsd:enumeration>
36
+ </xsd:restriction>
37
+ </xsd:simpleType>
38
+ <xsd:complexType name="Management.OCSPResponder.SignInformation">
39
+ <xsd:sequence>
40
+ <xsd:element name="signer_certificate" type="xsd:string"/>
41
+ <xsd:element name="private_key" type="xsd:string"/>
42
+ <xsd:element name="pass_phrase" type="xsd:string"/>
43
+ <xsd:element name="other_certificate" type="xsd:string"/>
44
+ <xsd:element name="digest_method" type="tns:Management.OCSPDigestMethod"/>
45
+ </xsd:sequence>
46
+ </xsd:complexType>
47
+ <xsd:simpleType name="Common.EnabledState">
48
+ <xsd:restriction base="xsd:string">
49
+ <xsd:enumeration value="STATE_DISABLED">
50
+ <xsd:annotation>
51
+ <xsd:documentation>STATE_DISABLED</xsd:documentation>
52
+ </xsd:annotation>
53
+ </xsd:enumeration>
54
+ <xsd:enumeration value="STATE_ENABLED">
55
+ <xsd:annotation>
56
+ <xsd:documentation>STATE_ENABLED</xsd:documentation>
57
+ </xsd:annotation>
58
+ </xsd:enumeration>
59
+ </xsd:restriction>
60
+ </xsd:simpleType>
61
+ <xsd:complexType name="Management.OCSPResponder.ResponderDefinitionSequence">
62
+ <xsd:complexContent>
63
+ <xsd:restriction base='SOAP-ENC:Array'>
64
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='tns:Management.OCSPResponder.ResponderDefinition[]'/>
65
+ </xsd:restriction>
66
+ </xsd:complexContent>
67
+ </xsd:complexType>
68
+ <xsd:complexType name="Common.StringSequence">
69
+ <xsd:complexContent>
70
+ <xsd:restriction base='SOAP-ENC:Array'>
71
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='xsd:string[]'/>
72
+ </xsd:restriction>
73
+ </xsd:complexContent>
74
+ </xsd:complexType>
75
+ <xsd:complexType name="Common.ULongSequence">
76
+ <xsd:complexContent>
77
+ <xsd:restriction base='SOAP-ENC:Array'>
78
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='xsd:long[]'/>
79
+ </xsd:restriction>
80
+ </xsd:complexContent>
81
+ </xsd:complexType>
82
+ <xsd:complexType name="Management.OCSPResponder.ResponderDefinition">
83
+ <xsd:sequence>
84
+ <xsd:element name="name" type="xsd:string"/>
85
+ <xsd:element name="url" type="xsd:string"/>
86
+ </xsd:sequence>
87
+ </xsd:complexType>
88
+ <xsd:complexType name="Management.OCSPResponder.SignInformationSequence">
89
+ <xsd:complexContent>
90
+ <xsd:restriction base='SOAP-ENC:Array'>
91
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='tns:Management.OCSPResponder.SignInformation[]'/>
92
+ </xsd:restriction>
93
+ </xsd:complexContent>
94
+ </xsd:complexType>
95
+ <xsd:complexType name="Management.OCSPDigestMethodSequence">
96
+ <xsd:complexContent>
97
+ <xsd:restriction base='SOAP-ENC:Array'>
98
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='tns:Management.OCSPDigestMethod[]'/>
99
+ </xsd:restriction>
100
+ </xsd:complexContent>
101
+ </xsd:complexType>
102
+ <xsd:complexType name="Common.EnabledStateSequence">
103
+ <xsd:complexContent>
104
+ <xsd:restriction base='SOAP-ENC:Array'>
105
+ <xsd:attribute ref='SOAP-ENC:arrayType' wsdl:arrayType='tns:Common.EnabledState[]'/>
106
+ </xsd:restriction>
107
+ </xsd:complexContent>
108
+ </xsd:complexType>
109
+ </xsd:schema>
110
+ </types>
111
+
112
+ <!-- message -->
113
+
114
+ <message name="Management.OCSPResponder.get_listRequest">
115
+ </message>
116
+ <message name="Management.OCSPResponder.get_listResponse">
117
+ <part name="return" type="tns:Common.StringSequence"/>
118
+ </message>
119
+
120
+ <message name="Management.OCSPResponder.createRequest">
121
+ <part name="responders" type="tns:Management.OCSPResponder.ResponderDefinitionSequence"/>
122
+ </message>
123
+ <message name="Management.OCSPResponder.createResponse">
124
+ </message>
125
+
126
+ <message name="Management.OCSPResponder.delete_responderRequest">
127
+ <part name="responders" type="tns:Common.StringSequence"/>
128
+ </message>
129
+ <message name="Management.OCSPResponder.delete_responderResponse">
130
+ </message>
131
+
132
+ <message name="Management.OCSPResponder.delete_all_respondersRequest">
133
+ </message>
134
+ <message name="Management.OCSPResponder.delete_all_respondersResponse">
135
+ </message>
136
+
137
+ <message name="Management.OCSPResponder.set_urlRequest">
138
+ <part name="responders" type="tns:Common.StringSequence"/>
139
+ <part name="urls" type="tns:Common.StringSequence"/>
140
+ </message>
141
+ <message name="Management.OCSPResponder.set_urlResponse">
142
+ </message>
143
+
144
+ <message name="Management.OCSPResponder.get_urlRequest">
145
+ <part name="responders" type="tns:Common.StringSequence"/>
146
+ </message>
147
+ <message name="Management.OCSPResponder.get_urlResponse">
148
+ <part name="return" type="tns:Common.StringSequence"/>
149
+ </message>
150
+
151
+ <message name="Management.OCSPResponder.set_ca_fileRequest">
152
+ <part name="responders" type="tns:Common.StringSequence"/>
153
+ <part name="ca_files" type="tns:Common.StringSequence"/>
154
+ </message>
155
+ <message name="Management.OCSPResponder.set_ca_fileResponse">
156
+ </message>
157
+
158
+ <message name="Management.OCSPResponder.get_ca_fileRequest">
159
+ <part name="responders" type="tns:Common.StringSequence"/>
160
+ </message>
161
+ <message name="Management.OCSPResponder.get_ca_fileResponse">
162
+ <part name="return" type="tns:Common.StringSequence"/>
163
+ </message>
164
+
165
+ <message name="Management.OCSPResponder.set_ca_file_v2Request">
166
+ <part name="responders" type="tns:Common.StringSequence"/>
167
+ <part name="ca_files" type="tns:Common.StringSequence"/>
168
+ </message>
169
+ <message name="Management.OCSPResponder.set_ca_file_v2Response">
170
+ </message>
171
+
172
+ <message name="Management.OCSPResponder.get_ca_file_v2Request">
173
+ <part name="responders" type="tns:Common.StringSequence"/>
174
+ </message>
175
+ <message name="Management.OCSPResponder.get_ca_file_v2Response">
176
+ <part name="return" type="tns:Common.StringSequence"/>
177
+ </message>
178
+
179
+ <message name="Management.OCSPResponder.set_ca_pathRequest">
180
+ <part name="responders" type="tns:Common.StringSequence"/>
181
+ <part name="ca_paths" type="tns:Common.StringSequence"/>
182
+ </message>
183
+ <message name="Management.OCSPResponder.set_ca_pathResponse">
184
+ </message>
185
+
186
+ <message name="Management.OCSPResponder.get_ca_pathRequest">
187
+ <part name="responders" type="tns:Common.StringSequence"/>
188
+ </message>
189
+ <message name="Management.OCSPResponder.get_ca_pathResponse">
190
+ <part name="return" type="tns:Common.StringSequence"/>
191
+ </message>
192
+
193
+ <message name="Management.OCSPResponder.set_other_certificate_fileRequest">
194
+ <part name="responders" type="tns:Common.StringSequence"/>
195
+ <part name="other_files" type="tns:Common.StringSequence"/>
196
+ </message>
197
+ <message name="Management.OCSPResponder.set_other_certificate_fileResponse">
198
+ </message>
199
+
200
+ <message name="Management.OCSPResponder.get_other_certificate_fileRequest">
201
+ <part name="responders" type="tns:Common.StringSequence"/>
202
+ </message>
203
+ <message name="Management.OCSPResponder.get_other_certificate_fileResponse">
204
+ <part name="return" type="tns:Common.StringSequence"/>
205
+ </message>
206
+
207
+ <message name="Management.OCSPResponder.set_other_certificate_file_v2Request">
208
+ <part name="responders" type="tns:Common.StringSequence"/>
209
+ <part name="other_files" type="tns:Common.StringSequence"/>
210
+ </message>
211
+ <message name="Management.OCSPResponder.set_other_certificate_file_v2Response">
212
+ </message>
213
+
214
+ <message name="Management.OCSPResponder.get_other_certificate_file_v2Request">
215
+ <part name="responders" type="tns:Common.StringSequence"/>
216
+ </message>
217
+ <message name="Management.OCSPResponder.get_other_certificate_file_v2Response">
218
+ <part name="return" type="tns:Common.StringSequence"/>
219
+ </message>
220
+
221
+ <message name="Management.OCSPResponder.set_trust_other_certificate_stateRequest">
222
+ <part name="responders" type="tns:Common.StringSequence"/>
223
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
224
+ </message>
225
+ <message name="Management.OCSPResponder.set_trust_other_certificate_stateResponse">
226
+ </message>
227
+
228
+ <message name="Management.OCSPResponder.get_trust_other_certificate_stateRequest">
229
+ <part name="responders" type="tns:Common.StringSequence"/>
230
+ </message>
231
+ <message name="Management.OCSPResponder.get_trust_other_certificate_stateResponse">
232
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
233
+ </message>
234
+
235
+ <message name="Management.OCSPResponder.set_va_fileRequest">
236
+ <part name="responders" type="tns:Common.StringSequence"/>
237
+ <part name="va_files" type="tns:Common.StringSequence"/>
238
+ </message>
239
+ <message name="Management.OCSPResponder.set_va_fileResponse">
240
+ </message>
241
+
242
+ <message name="Management.OCSPResponder.get_va_fileRequest">
243
+ <part name="responders" type="tns:Common.StringSequence"/>
244
+ </message>
245
+ <message name="Management.OCSPResponder.get_va_fileResponse">
246
+ <part name="return" type="tns:Common.StringSequence"/>
247
+ </message>
248
+
249
+ <message name="Management.OCSPResponder.set_va_file_v2Request">
250
+ <part name="responders" type="tns:Common.StringSequence"/>
251
+ <part name="va_files" type="tns:Common.StringSequence"/>
252
+ </message>
253
+ <message name="Management.OCSPResponder.set_va_file_v2Response">
254
+ </message>
255
+
256
+ <message name="Management.OCSPResponder.get_va_file_v2Request">
257
+ <part name="responders" type="tns:Common.StringSequence"/>
258
+ </message>
259
+ <message name="Management.OCSPResponder.get_va_file_v2Response">
260
+ <part name="return" type="tns:Common.StringSequence"/>
261
+ </message>
262
+
263
+ <message name="Management.OCSPResponder.set_signing_informationRequest">
264
+ <part name="responders" type="tns:Common.StringSequence"/>
265
+ <part name="signers" type="tns:Management.OCSPResponder.SignInformationSequence"/>
266
+ </message>
267
+ <message name="Management.OCSPResponder.set_signing_informationResponse">
268
+ </message>
269
+
270
+ <message name="Management.OCSPResponder.get_signing_informationRequest">
271
+ <part name="responders" type="tns:Common.StringSequence"/>
272
+ </message>
273
+ <message name="Management.OCSPResponder.get_signing_informationResponse">
274
+ <part name="return" type="tns:Management.OCSPResponder.SignInformationSequence"/>
275
+ </message>
276
+
277
+ <message name="Management.OCSPResponder.set_signing_information_v2Request">
278
+ <part name="responders" type="tns:Common.StringSequence"/>
279
+ <part name="signers" type="tns:Management.OCSPResponder.SignInformationSequence"/>
280
+ </message>
281
+ <message name="Management.OCSPResponder.set_signing_information_v2Response">
282
+ </message>
283
+
284
+ <message name="Management.OCSPResponder.get_signing_information_v2Request">
285
+ <part name="responders" type="tns:Common.StringSequence"/>
286
+ </message>
287
+ <message name="Management.OCSPResponder.get_signing_information_v2Response">
288
+ <part name="return" type="tns:Management.OCSPResponder.SignInformationSequence"/>
289
+ </message>
290
+
291
+ <message name="Management.OCSPResponder.set_certificate_id_digest_methodRequest">
292
+ <part name="responders" type="tns:Common.StringSequence"/>
293
+ <part name="digest_methods" type="tns:Management.OCSPDigestMethodSequence"/>
294
+ </message>
295
+ <message name="Management.OCSPResponder.set_certificate_id_digest_methodResponse">
296
+ </message>
297
+
298
+ <message name="Management.OCSPResponder.get_certificate_id_digest_methodRequest">
299
+ <part name="responders" type="tns:Common.StringSequence"/>
300
+ </message>
301
+ <message name="Management.OCSPResponder.get_certificate_id_digest_methodResponse">
302
+ <part name="return" type="tns:Management.OCSPDigestMethodSequence"/>
303
+ </message>
304
+
305
+ <message name="Management.OCSPResponder.set_ignore_aia_stateRequest">
306
+ <part name="responders" type="tns:Common.StringSequence"/>
307
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
308
+ </message>
309
+ <message name="Management.OCSPResponder.set_ignore_aia_stateResponse">
310
+ </message>
311
+
312
+ <message name="Management.OCSPResponder.get_ignore_aia_stateRequest">
313
+ <part name="responders" type="tns:Common.StringSequence"/>
314
+ </message>
315
+ <message name="Management.OCSPResponder.get_ignore_aia_stateResponse">
316
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
317
+ </message>
318
+
319
+ <message name="Management.OCSPResponder.set_allow_additional_certificate_stateRequest">
320
+ <part name="responders" type="tns:Common.StringSequence"/>
321
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
322
+ </message>
323
+ <message name="Management.OCSPResponder.set_allow_additional_certificate_stateResponse">
324
+ </message>
325
+
326
+ <message name="Management.OCSPResponder.get_allow_additional_certificate_stateRequest">
327
+ <part name="responders" type="tns:Common.StringSequence"/>
328
+ </message>
329
+ <message name="Management.OCSPResponder.get_allow_additional_certificate_stateResponse">
330
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
331
+ </message>
332
+
333
+ <message name="Management.OCSPResponder.set_verification_stateRequest">
334
+ <part name="responders" type="tns:Common.StringSequence"/>
335
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
336
+ </message>
337
+ <message name="Management.OCSPResponder.set_verification_stateResponse">
338
+ </message>
339
+
340
+ <message name="Management.OCSPResponder.get_verification_stateRequest">
341
+ <part name="responders" type="tns:Common.StringSequence"/>
342
+ </message>
343
+ <message name="Management.OCSPResponder.get_verification_stateResponse">
344
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
345
+ </message>
346
+
347
+ <message name="Management.OCSPResponder.set_intern_stateRequest">
348
+ <part name="responders" type="tns:Common.StringSequence"/>
349
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
350
+ </message>
351
+ <message name="Management.OCSPResponder.set_intern_stateResponse">
352
+ </message>
353
+
354
+ <message name="Management.OCSPResponder.get_intern_stateRequest">
355
+ <part name="responders" type="tns:Common.StringSequence"/>
356
+ </message>
357
+ <message name="Management.OCSPResponder.get_intern_stateResponse">
358
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
359
+ </message>
360
+
361
+ <message name="Management.OCSPResponder.set_nonce_stateRequest">
362
+ <part name="responders" type="tns:Common.StringSequence"/>
363
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
364
+ </message>
365
+ <message name="Management.OCSPResponder.set_nonce_stateResponse">
366
+ </message>
367
+
368
+ <message name="Management.OCSPResponder.get_nonce_stateRequest">
369
+ <part name="responders" type="tns:Common.StringSequence"/>
370
+ </message>
371
+ <message name="Management.OCSPResponder.get_nonce_stateResponse">
372
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
373
+ </message>
374
+
375
+ <message name="Management.OCSPResponder.set_signature_verification_stateRequest">
376
+ <part name="responders" type="tns:Common.StringSequence"/>
377
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
378
+ </message>
379
+ <message name="Management.OCSPResponder.set_signature_verification_stateResponse">
380
+ </message>
381
+
382
+ <message name="Management.OCSPResponder.get_signature_verification_stateRequest">
383
+ <part name="responders" type="tns:Common.StringSequence"/>
384
+ </message>
385
+ <message name="Management.OCSPResponder.get_signature_verification_stateResponse">
386
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
387
+ </message>
388
+
389
+ <message name="Management.OCSPResponder.set_certificate_verification_stateRequest">
390
+ <part name="responders" type="tns:Common.StringSequence"/>
391
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
392
+ </message>
393
+ <message name="Management.OCSPResponder.set_certificate_verification_stateResponse">
394
+ </message>
395
+
396
+ <message name="Management.OCSPResponder.get_certificate_verification_stateRequest">
397
+ <part name="responders" type="tns:Common.StringSequence"/>
398
+ </message>
399
+ <message name="Management.OCSPResponder.get_certificate_verification_stateResponse">
400
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
401
+ </message>
402
+
403
+ <message name="Management.OCSPResponder.set_chain_stateRequest">
404
+ <part name="responders" type="tns:Common.StringSequence"/>
405
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
406
+ </message>
407
+ <message name="Management.OCSPResponder.set_chain_stateResponse">
408
+ </message>
409
+
410
+ <message name="Management.OCSPResponder.get_chain_stateRequest">
411
+ <part name="responders" type="tns:Common.StringSequence"/>
412
+ </message>
413
+ <message name="Management.OCSPResponder.get_chain_stateResponse">
414
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
415
+ </message>
416
+
417
+ <message name="Management.OCSPResponder.set_certificate_check_stateRequest">
418
+ <part name="responders" type="tns:Common.StringSequence"/>
419
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
420
+ </message>
421
+ <message name="Management.OCSPResponder.set_certificate_check_stateResponse">
422
+ </message>
423
+
424
+ <message name="Management.OCSPResponder.get_certificate_check_stateRequest">
425
+ <part name="responders" type="tns:Common.StringSequence"/>
426
+ </message>
427
+ <message name="Management.OCSPResponder.get_certificate_check_stateResponse">
428
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
429
+ </message>
430
+
431
+ <message name="Management.OCSPResponder.set_explicit_stateRequest">
432
+ <part name="responders" type="tns:Common.StringSequence"/>
433
+ <part name="states" type="tns:Common.EnabledStateSequence"/>
434
+ </message>
435
+ <message name="Management.OCSPResponder.set_explicit_stateResponse">
436
+ </message>
437
+
438
+ <message name="Management.OCSPResponder.get_explicit_stateRequest">
439
+ <part name="responders" type="tns:Common.StringSequence"/>
440
+ </message>
441
+ <message name="Management.OCSPResponder.get_explicit_stateResponse">
442
+ <part name="return" type="tns:Common.EnabledStateSequence"/>
443
+ </message>
444
+
445
+ <message name="Management.OCSPResponder.set_validity_periodRequest">
446
+ <part name="responders" type="tns:Common.StringSequence"/>
447
+ <part name="ranges" type="tns:Common.ULongSequence"/>
448
+ </message>
449
+ <message name="Management.OCSPResponder.set_validity_periodResponse">
450
+ </message>
451
+
452
+ <message name="Management.OCSPResponder.get_validity_periodRequest">
453
+ <part name="responders" type="tns:Common.StringSequence"/>
454
+ </message>
455
+ <message name="Management.OCSPResponder.get_validity_periodResponse">
456
+ <part name="return" type="tns:Common.ULongSequence"/>
457
+ </message>
458
+
459
+ <message name="Management.OCSPResponder.set_status_ageRequest">
460
+ <part name="responders" type="tns:Common.StringSequence"/>
461
+ <part name="ages" type="tns:Common.ULongSequence"/>
462
+ </message>
463
+ <message name="Management.OCSPResponder.set_status_ageResponse">
464
+ </message>
465
+
466
+ <message name="Management.OCSPResponder.get_status_ageRequest">
467
+ <part name="responders" type="tns:Common.StringSequence"/>
468
+ </message>
469
+ <message name="Management.OCSPResponder.get_status_ageResponse">
470
+ <part name="return" type="tns:Common.ULongSequence"/>
471
+ </message>
472
+
473
+ <message name="Management.OCSPResponder.set_descriptionRequest">
474
+ <part name="responders" type="tns:Common.StringSequence"/>
475
+ <part name="descriptions" type="tns:Common.StringSequence"/>
476
+ </message>
477
+ <message name="Management.OCSPResponder.set_descriptionResponse">
478
+ </message>
479
+
480
+ <message name="Management.OCSPResponder.get_descriptionRequest">
481
+ <part name="responders" type="tns:Common.StringSequence"/>
482
+ </message>
483
+ <message name="Management.OCSPResponder.get_descriptionResponse">
484
+ <part name="return" type="tns:Common.StringSequence"/>
485
+ </message>
486
+
487
+ <message name="Management.OCSPResponder.get_versionRequest">
488
+ </message>
489
+ <message name="Management.OCSPResponder.get_versionResponse">
490
+ <part name="return" type="xsd:string"/>
491
+ </message>
492
+
493
+ <!-- portType -->
494
+
495
+ <portType name="Management.OCSPResponderPortType">
496
+ <operation name="get_list">
497
+ <documentation>
498
+ Gets a list of all OCSP responders.
499
+
500
+ </documentation>
501
+ <input message="tns:Management.OCSPResponder.get_listRequest"/>
502
+ <output message="tns:Management.OCSPResponder.get_listResponse"/>
503
+ </operation>
504
+ <operation name="create">
505
+ <documentation>
506
+ Creates the specified OCSP responders.
507
+
508
+ </documentation>
509
+ <input message="tns:Management.OCSPResponder.createRequest"/>
510
+ <output message="tns:Management.OCSPResponder.createResponse"/>
511
+ </operation>
512
+ <operation name="delete_responder">
513
+ <documentation>
514
+ Deletes the specified OCSP responders.
515
+
516
+ </documentation>
517
+ <input message="tns:Management.OCSPResponder.delete_responderRequest"/>
518
+ <output message="tns:Management.OCSPResponder.delete_responderResponse"/>
519
+ </operation>
520
+ <operation name="delete_all_responders">
521
+ <documentation>
522
+ Deletes all OCSP responders.
523
+
524
+ </documentation>
525
+ <input message="tns:Management.OCSPResponder.delete_all_respondersRequest"/>
526
+ <output message="tns:Management.OCSPResponder.delete_all_respondersResponse"/>
527
+ </operation>
528
+ <operation name="set_url">
529
+ <documentation>
530
+ Sets the URLs of the responders.
531
+
532
+ </documentation>
533
+ <input message="tns:Management.OCSPResponder.set_urlRequest"/>
534
+ <output message="tns:Management.OCSPResponder.set_urlResponse"/>
535
+ </operation>
536
+ <operation name="get_url">
537
+ <documentation>
538
+ Gets the URL or hostnames of the responders.
539
+
540
+ </documentation>
541
+ <input message="tns:Management.OCSPResponder.get_urlRequest"/>
542
+ <output message="tns:Management.OCSPResponder.get_urlResponse"/>
543
+ </operation>
544
+ <operation name="set_ca_file">
545
+ <documentation>
546
+ Certificate files are officially managed as certificate file
547
+ objects via the set_ca_file_v2 method and
548
+ Management::KeyCertificate interface. Thus this method has been
549
+ deprecated.
550
+
551
+ Sets the names of the trusted CA certificate files used by the
552
+ responders to verify the signature on the OCSP response.
553
+
554
+ </documentation>
555
+ <input message="tns:Management.OCSPResponder.set_ca_fileRequest"/>
556
+ <output message="tns:Management.OCSPResponder.set_ca_fileResponse"/>
557
+ </operation>
558
+ <operation name="get_ca_file">
559
+ <documentation>
560
+ Certificate files are officially managed as certificate file
561
+ objects via the get_ca_file_v2 method and
562
+ Management::KeyCertificate interface. Thus this method has been
563
+ deprecated.
564
+
565
+ Gets the names of the trusted CA certificate files used by the
566
+ responders to verify the signature on the OCSP response.
567
+
568
+ </documentation>
569
+ <input message="tns:Management.OCSPResponder.get_ca_fileRequest"/>
570
+ <output message="tns:Management.OCSPResponder.get_ca_fileResponse"/>
571
+ </operation>
572
+ <operation name="set_ca_file_v2">
573
+ <documentation>
574
+ Sets the names of the certificate file objects holding the trusted
575
+ CA certificates used by the responders to verify the signature on
576
+ the OCSP response.
577
+
578
+ Certificate file objects are managed by the
579
+ Management::KeyCertificate interface.
580
+
581
+ </documentation>
582
+ <input message="tns:Management.OCSPResponder.set_ca_file_v2Request"/>
583
+ <output message="tns:Management.OCSPResponder.set_ca_file_v2Response"/>
584
+ </operation>
585
+ <operation name="get_ca_file_v2">
586
+ <documentation>
587
+ Gets the names of the certificate file objects holding the trusted
588
+ CA certificates used by the responders to verify the signature on
589
+ the OCSP response.
590
+
591
+ Certificate file objects are managed by the
592
+ Management::KeyCertificate interface.
593
+
594
+ </documentation>
595
+ <input message="tns:Management.OCSPResponder.get_ca_file_v2Request"/>
596
+ <output message="tns:Management.OCSPResponder.get_ca_file_v2Response"/>
597
+ </operation>
598
+ <operation name="set_ca_path">
599
+ <documentation>
600
+ Sets the paths of the trusted CA certificates used by the responders
601
+ to verify the signature on the OCSP response.
602
+
603
+ </documentation>
604
+ <input message="tns:Management.OCSPResponder.set_ca_pathRequest"/>
605
+ <output message="tns:Management.OCSPResponder.set_ca_pathResponse"/>
606
+ </operation>
607
+ <operation name="get_ca_path">
608
+ <documentation>
609
+ Gets the paths of the trusted CA certificates used by the responders
610
+ to verify the signature on the OCSP response.
611
+
612
+ </documentation>
613
+ <input message="tns:Management.OCSPResponder.get_ca_pathRequest"/>
614
+ <output message="tns:Management.OCSPResponder.get_ca_pathResponse"/>
615
+ </operation>
616
+ <operation name="set_other_certificate_file">
617
+ <documentation>
618
+ Certificate files are officially managed as certificate file
619
+ objects via the set_other_certificate_file_v2 method and
620
+ Management::KeyCertificate interface. Thus this method has been
621
+ deprecated.
622
+
623
+ Sets the files containing additional certificates to search when attempting to locate
624
+ the OCSP response signing certificate. Some responders omit the actual signer's
625
+ certificates from the response: this option can be used to supply the necessary
626
+ certificates in such cases.
627
+
628
+ </documentation>
629
+ <input message="tns:Management.OCSPResponder.set_other_certificate_fileRequest"/>
630
+ <output message="tns:Management.OCSPResponder.set_other_certificate_fileResponse"/>
631
+ </operation>
632
+ <operation name="get_other_certificate_file">
633
+ <documentation>
634
+ Certificate files are officially managed as certificate file
635
+ objects via the get_other_certificate_file_v2 method and
636
+ Management::KeyCertificate interface. Thus this method has been
637
+ deprecated.
638
+
639
+ Gets the files containing additional certificates to search when attempting to locate
640
+ the OCSP response signing certificate. Some responders omit the actual signer's
641
+ certificates from the response: this option can be used to supply the necessary
642
+ certificates in such cases.
643
+
644
+ </documentation>
645
+ <input message="tns:Management.OCSPResponder.get_other_certificate_fileRequest"/>
646
+ <output message="tns:Management.OCSPResponder.get_other_certificate_fileResponse"/>
647
+ </operation>
648
+ <operation name="set_other_certificate_file_v2">
649
+ <documentation>
650
+ Sets the names of the certificate file objects containing
651
+ additional certificates to search when attempting to locate
652
+ the OCSP response signing certificate. Some responders omit
653
+ the actual signer's certificates from the response: this
654
+ option can be used to supply the necessary certificates in
655
+ such cases.
656
+
657
+ Certificate file objects are managed by the
658
+ Management::KeyCertificate interface.
659
+
660
+ </documentation>
661
+ <input message="tns:Management.OCSPResponder.set_other_certificate_file_v2Request"/>
662
+ <output message="tns:Management.OCSPResponder.set_other_certificate_file_v2Response"/>
663
+ </operation>
664
+ <operation name="get_other_certificate_file_v2">
665
+ <documentation>
666
+ Gets the names of the certificate file objects containing
667
+ additional certificates to search when attempting to locate
668
+ the OCSP response signing certificate. Some responders omit
669
+ the actual signer's certificates from the response: this
670
+ option can be used to supply the necessary certificates in
671
+ such cases.
672
+
673
+ Certificate file objects are managed by the
674
+ Management::KeyCertificate interface.
675
+
676
+ </documentation>
677
+ <input message="tns:Management.OCSPResponder.get_other_certificate_file_v2Request"/>
678
+ <output message="tns:Management.OCSPResponder.get_other_certificate_file_v2Response"/>
679
+ </operation>
680
+ <operation name="set_trust_other_certificate_state">
681
+ <documentation>
682
+ Sets the states indicating whether to be explicitly trust the other certificates specified
683
+ via set_other_certificate_file and no additional checks will be performed on them.
684
+ This is useful when the complete responder certificate chain is not available or
685
+ trusting a root CA is not appropriate.
686
+
687
+ </documentation>
688
+ <input message="tns:Management.OCSPResponder.set_trust_other_certificate_stateRequest"/>
689
+ <output message="tns:Management.OCSPResponder.set_trust_other_certificate_stateResponse"/>
690
+ </operation>
691
+ <operation name="get_trust_other_certificate_state">
692
+ <documentation>
693
+ Gets the states indicating whether to be explicitly trust the other certificates specified
694
+ via set_other_certificate_file and no additional checks will be performed on them.
695
+ This is useful when the complete responder certificate chain is not available or
696
+ trusting a root CA is not appropriate.
697
+
698
+ </documentation>
699
+ <input message="tns:Management.OCSPResponder.get_trust_other_certificate_stateRequest"/>
700
+ <output message="tns:Management.OCSPResponder.get_trust_other_certificate_stateResponse"/>
701
+ </operation>
702
+ <operation name="set_va_file">
703
+ <documentation>
704
+ Certificate files are officially managed as certificate file
705
+ objects via the set_va_file_v2 method and
706
+ Management::KeyCertificate interface. Thus this method has been
707
+ deprecated.
708
+
709
+ Sets the names of the files containing explicitly trusted responder
710
+ certificates. This functionality is equivalent to having the other
711
+ certificates specified via set_other_certificate_file, and setting
712
+ the state via set_trust_other_certificate_state.
713
+
714
+ </documentation>
715
+ <input message="tns:Management.OCSPResponder.set_va_fileRequest"/>
716
+ <output message="tns:Management.OCSPResponder.set_va_fileResponse"/>
717
+ </operation>
718
+ <operation name="get_va_file">
719
+ <documentation>
720
+ Certificate files are officially managed as certificate file
721
+ objects via the get_va_file_v2 method and
722
+ Management::KeyCertificate interface. Thus this method has been
723
+ deprecated.
724
+
725
+ Gets the names of the files containing explicitly trusted responder
726
+ certificates.
727
+
728
+ </documentation>
729
+ <input message="tns:Management.OCSPResponder.get_va_fileRequest"/>
730
+ <output message="tns:Management.OCSPResponder.get_va_fileResponse"/>
731
+ </operation>
732
+ <operation name="set_va_file_v2">
733
+ <documentation>
734
+ Sets the name of the certificate file objects containing explicitly
735
+ trusted responder certificates. This functionality is equivalent
736
+ to having the other certificates specified via
737
+ set_other_certificate_file, and setting the state via
738
+ set_trust_other_certificate_state.
739
+
740
+ Certificate file objects are managed by the
741
+ Management::KeyCertificate interface.
742
+
743
+ </documentation>
744
+ <input message="tns:Management.OCSPResponder.set_va_file_v2Request"/>
745
+ <output message="tns:Management.OCSPResponder.set_va_file_v2Response"/>
746
+ </operation>
747
+ <operation name="get_va_file_v2">
748
+ <documentation>
749
+ Gets the names of the certificate file objects containing
750
+ explicitly trusted responder certificates.
751
+
752
+ Certificate file objects are managed by the
753
+ Management::KeyCertificate interface.
754
+
755
+ </documentation>
756
+ <input message="tns:Management.OCSPResponder.get_va_file_v2Request"/>
757
+ <output message="tns:Management.OCSPResponder.get_va_file_v2Response"/>
758
+ </operation>
759
+ <operation name="set_signing_information">
760
+ <documentation>
761
+ Certificate and key files are officially managed as
762
+ certificate and certificate key file objects via the
763
+ set_signing_information_v2 method and
764
+ Management::KeyCertificate interface. Thus this method has
765
+ been deprecated.
766
+
767
+ Sets the signing information necessary to sign the OCSP requests.
768
+
769
+ </documentation>
770
+ <input message="tns:Management.OCSPResponder.set_signing_informationRequest"/>
771
+ <output message="tns:Management.OCSPResponder.set_signing_informationResponse"/>
772
+ </operation>
773
+ <operation name="get_signing_information">
774
+ <documentation>
775
+ Certificate and key files are officially managed as file
776
+ objects via the get_signing_information_v2 method and
777
+ Management::KeyCertificate interface. Thus this method has
778
+ been deprecated.
779
+
780
+ Gets the signing information necessary to sign the OCSP requests.
781
+
782
+ </documentation>
783
+ <input message="tns:Management.OCSPResponder.get_signing_informationRequest"/>
784
+ <output message="tns:Management.OCSPResponder.get_signing_informationResponse"/>
785
+ </operation>
786
+ <operation name="set_signing_information_v2">
787
+ <documentation>
788
+ Sets the signing information necessary to sign the OCSP requests.
789
+
790
+ Certificate and certificate key file objects are managed by the
791
+ Management::KeyCertificate interface.
792
+
793
+ </documentation>
794
+ <input message="tns:Management.OCSPResponder.set_signing_information_v2Request"/>
795
+ <output message="tns:Management.OCSPResponder.set_signing_information_v2Response"/>
796
+ </operation>
797
+ <operation name="get_signing_information_v2">
798
+ <documentation>
799
+ Gets the signing information necessary to sign the OCSP requests.
800
+
801
+ Certificate and certificate key file objects are managed by the
802
+ Management::KeyCertificate interface.
803
+
804
+ </documentation>
805
+ <input message="tns:Management.OCSPResponder.get_signing_information_v2Request"/>
806
+ <output message="tns:Management.OCSPResponder.get_signing_information_v2Response"/>
807
+ </operation>
808
+ <operation name="set_certificate_id_digest_method">
809
+ <documentation>
810
+ Sets the digest algorithm for hashing the certificate information used to
811
+ create the certificate ID that is sent to the responder.
812
+
813
+ </documentation>
814
+ <input message="tns:Management.OCSPResponder.set_certificate_id_digest_methodRequest"/>
815
+ <output message="tns:Management.OCSPResponder.set_certificate_id_digest_methodResponse"/>
816
+ </operation>
817
+ <operation name="get_certificate_id_digest_method">
818
+ <documentation>
819
+ Gets the digest algorithm for hashing the certificate information used to
820
+ create the certificate ID that is sent to the responder.
821
+
822
+ </documentation>
823
+ <input message="tns:Management.OCSPResponder.get_certificate_id_digest_methodRequest"/>
824
+ <output message="tns:Management.OCSPResponder.get_certificate_id_digest_methodResponse"/>
825
+ </operation>
826
+ <operation name="set_ignore_aia_state">
827
+ <documentation>
828
+ Sets the states that if true, then always use the URL specified in the configuration file, and ignore
829
+ any URL contained in the client certificates' authorityInfoAccess OCSP field. If this option is not
830
+ set (the default) AND the client certificate has a valid AIA OCSP field set, then first attempt to
831
+ connect to the responder in the client's AIA OCSP field, and fall back to the URL in the responder
832
+ definition if that server is not available. See RFC2560 for more detail of the authorityInfoAccess
833
+ x509 extension and its intended usage.
834
+
835
+ </documentation>
836
+ <input message="tns:Management.OCSPResponder.set_ignore_aia_stateRequest"/>
837
+ <output message="tns:Management.OCSPResponder.set_ignore_aia_stateResponse"/>
838
+ </operation>
839
+ <operation name="get_ignore_aia_state">
840
+ <documentation>
841
+ Gets the states that if true, then always use the URL specified in the configuration file, and ignore
842
+ any URL contained in the client certificates' authorityInfoAccess OCSP field. If this option is not
843
+ set (the default) AND the client certificate has a valid AIA OCSP field set, then first attempt to
844
+ connect to the responder in the client's AIA OCSP field, and fall back to the URL in the responder
845
+ definition if that server is not available. See RFC2560 for more detail of the authorityInfoAccess
846
+ x509 extension and its intended usage.
847
+
848
+ </documentation>
849
+ <input message="tns:Management.OCSPResponder.get_ignore_aia_stateRequest"/>
850
+ <output message="tns:Management.OCSPResponder.get_ignore_aia_stateResponse"/>
851
+ </operation>
852
+ <operation name="set_allow_additional_certificate_state">
853
+ <documentation>
854
+ Sets the states that indicate whether to allow the addition of certificates to the OCSP request.
855
+ This option should normally only be used for testing purposes.
856
+
857
+ </documentation>
858
+ <input message="tns:Management.OCSPResponder.set_allow_additional_certificate_stateRequest"/>
859
+ <output message="tns:Management.OCSPResponder.set_allow_additional_certificate_stateResponse"/>
860
+ </operation>
861
+ <operation name="get_allow_additional_certificate_state">
862
+ <documentation>
863
+ Gets the states that that indicate whether to allow the addition of certificates to the OCSP request.
864
+ This option should normally only be used for testing purposes.
865
+
866
+ </documentation>
867
+ <input message="tns:Management.OCSPResponder.get_allow_additional_certificate_stateRequest"/>
868
+ <output message="tns:Management.OCSPResponder.get_allow_additional_certificate_stateResponse"/>
869
+ </operation>
870
+ <operation name="set_verification_state">
871
+ <documentation>
872
+ Sets the states that indicate whether to attempt to verify the OCSP response signature or the nonce
873
+ values. This option will normally only be used for debugging since it disables all verification of
874
+ the responders certificate.
875
+
876
+ </documentation>
877
+ <input message="tns:Management.OCSPResponder.set_verification_stateRequest"/>
878
+ <output message="tns:Management.OCSPResponder.set_verification_stateResponse"/>
879
+ </operation>
880
+ <operation name="get_verification_state">
881
+ <documentation>
882
+ Gets the states that indicate whether to attempt to verify the OCSP response signature or the nonce
883
+ values. This option will normally only be used for debugging since it disables all verification of
884
+ the responders certificate.
885
+
886
+ </documentation>
887
+ <input message="tns:Management.OCSPResponder.get_verification_stateRequest"/>
888
+ <output message="tns:Management.OCSPResponder.get_verification_stateResponse"/>
889
+ </operation>
890
+ <operation name="set_intern_state">
891
+ <documentation>
892
+ Sets the states that indicate whether to ignore certificates contained in the OCSP response when searching
893
+ for the signers certificate. With this option the signers certificate must be specified with either
894
+ the -verify_certs or -VAfile options.
895
+
896
+ </documentation>
897
+ <input message="tns:Management.OCSPResponder.set_intern_stateRequest"/>
898
+ <output message="tns:Management.OCSPResponder.set_intern_stateResponse"/>
899
+ </operation>
900
+ <operation name="get_intern_state">
901
+ <documentation>
902
+ Gets the states that that indicate whether to ignore certificates contained in the OCSP response when searching
903
+ for the signers certificate. With this option the signers certificate must be specified with either
904
+ the -verify_certs or -VAfile options.
905
+
906
+ </documentation>
907
+ <input message="tns:Management.OCSPResponder.get_intern_stateRequest"/>
908
+ <output message="tns:Management.OCSPResponder.get_intern_stateResponse"/>
909
+ </operation>
910
+ <operation name="set_nonce_state">
911
+ <documentation>
912
+ Sets the state that indicates whether to send a nonce in the OCSP request.
913
+
914
+ </documentation>
915
+ <input message="tns:Management.OCSPResponder.set_nonce_stateRequest"/>
916
+ <output message="tns:Management.OCSPResponder.set_nonce_stateResponse"/>
917
+ </operation>
918
+ <operation name="get_nonce_state">
919
+ <documentation>
920
+ Gets the state that indicates whether to send a nonce in the OCSP request.
921
+
922
+ </documentation>
923
+ <input message="tns:Management.OCSPResponder.get_nonce_stateRequest"/>
924
+ <output message="tns:Management.OCSPResponder.get_nonce_stateResponse"/>
925
+ </operation>
926
+ <operation name="set_signature_verification_state">
927
+ <documentation>
928
+ Sets the states that indicate whether to check the signature on the OCSP response. Since this option
929
+ tolerates invalid signatures on OCSP responses it will normally only be used for testing purposes.
930
+
931
+ </documentation>
932
+ <input message="tns:Management.OCSPResponder.set_signature_verification_stateRequest"/>
933
+ <output message="tns:Management.OCSPResponder.set_signature_verification_stateResponse"/>
934
+ </operation>
935
+ <operation name="get_signature_verification_state">
936
+ <documentation>
937
+ Gets the states that indicate whether to check the signature on the OCSP response. Since this option
938
+ tolerates invalid signatures on OCSP responses it will normally only be used for testing purposes.
939
+
940
+ </documentation>
941
+ <input message="tns:Management.OCSPResponder.get_signature_verification_stateRequest"/>
942
+ <output message="tns:Management.OCSPResponder.get_signature_verification_stateResponse"/>
943
+ </operation>
944
+ <operation name="set_certificate_verification_state">
945
+ <documentation>
946
+ Sets the states that indicate whether to check the certificates in the OCSP responses.
947
+
948
+ </documentation>
949
+ <input message="tns:Management.OCSPResponder.set_certificate_verification_stateRequest"/>
950
+ <output message="tns:Management.OCSPResponder.set_certificate_verification_stateResponse"/>
951
+ </operation>
952
+ <operation name="get_certificate_verification_state">
953
+ <documentation>
954
+ Gets the states that indicate whether to check the certificates in the OCSP responses.
955
+
956
+ </documentation>
957
+ <input message="tns:Management.OCSPResponder.get_certificate_verification_stateRequest"/>
958
+ <output message="tns:Management.OCSPResponder.get_certificate_verification_stateResponse"/>
959
+ </operation>
960
+ <operation name="set_chain_state">
961
+ <documentation>
962
+ Sets the states that indicate whether to use certificates in the response as additional untrusted CA
963
+ certificates.
964
+
965
+ </documentation>
966
+ <input message="tns:Management.OCSPResponder.set_chain_stateRequest"/>
967
+ <output message="tns:Management.OCSPResponder.set_chain_stateResponse"/>
968
+ </operation>
969
+ <operation name="get_chain_state">
970
+ <documentation>
971
+ Gets the states that indicate whether to use certificates in the response as additional untrusted CA
972
+ certificates.
973
+
974
+ </documentation>
975
+ <input message="tns:Management.OCSPResponder.get_chain_stateRequest"/>
976
+ <output message="tns:Management.OCSPResponder.get_chain_stateResponse"/>
977
+ </operation>
978
+ <operation name="set_certificate_check_state">
979
+ <documentation>
980
+ Sets the states that indicate whether to perform any additional checks on the OCSP response signers
981
+ certificate. If false, do not make any checks to see if the signers certificate is authorized to
982
+ provide the necessary status information: as a result this option should only be used for testing
983
+ purposes.
984
+
985
+ </documentation>
986
+ <input message="tns:Management.OCSPResponder.set_certificate_check_stateRequest"/>
987
+ <output message="tns:Management.OCSPResponder.set_certificate_check_stateResponse"/>
988
+ </operation>
989
+ <operation name="get_certificate_check_state">
990
+ <documentation>
991
+ Gets the states that indicate whether to perform any additional checks on the OCSP response signers
992
+ certificate. If false, do not make any checks to see if the signers certificate is authorized to
993
+ provide the necessary status information: as a result this option should only be used for testing
994
+ purposes.
995
+
996
+ </documentation>
997
+ <input message="tns:Management.OCSPResponder.get_certificate_check_stateRequest"/>
998
+ <output message="tns:Management.OCSPResponder.get_certificate_check_stateResponse"/>
999
+ </operation>
1000
+ <operation name="set_explicit_state">
1001
+ <documentation>
1002
+ Sets the states that indicate whether to explicitly trust the OCSP response signers certificate as
1003
+ authorized for OCSP response signing. Specifying this option causes a response to be untrusted if
1004
+ the signers certificate does not contain the "OCSPSigning" extension.
1005
+
1006
+ </documentation>
1007
+ <input message="tns:Management.OCSPResponder.set_explicit_stateRequest"/>
1008
+ <output message="tns:Management.OCSPResponder.set_explicit_stateResponse"/>
1009
+ </operation>
1010
+ <operation name="get_explicit_state">
1011
+ <documentation>
1012
+ Gets the states that indicate whether to explicitly trust the OCSP response signers certificate as
1013
+ authorized for OCSP response signing. Specifying this option causes a response to be untrusted if
1014
+ the signers certificate does not contain the "OCSPSigning" extension.
1015
+
1016
+ </documentation>
1017
+ <input message="tns:Management.OCSPResponder.get_explicit_stateRequest"/>
1018
+ <output message="tns:Management.OCSPResponder.get_explicit_stateResponse"/>
1019
+ </operation>
1020
+ <operation name="set_validity_period">
1021
+ <documentation>
1022
+ Sets the range of times, in seconds, which will be tolerated in an OCSP response. Each certificate
1023
+ status response includes a notBefore time and an optional notAfter time. The current time should fall
1024
+ between these two values, but the interval between the two times may be only a few seconds. In practice
1025
+ the OCSP responder and clients clocks may not be precisely synchronized and so such a check may fail.
1026
+ To avoid this the -validity_period option can be used to specify an acceptable error range in seconds,
1027
+ the default value is 300 seconds.
1028
+
1029
+ </documentation>
1030
+ <input message="tns:Management.OCSPResponder.set_validity_periodRequest"/>
1031
+ <output message="tns:Management.OCSPResponder.set_validity_periodResponse"/>
1032
+ </operation>
1033
+ <operation name="get_validity_period">
1034
+ <documentation>
1035
+ Gets the range of times, in seconds, which will be tolerated in an OCSP response. Each certificate
1036
+ status response includes a notBefore time and an optional notAfter time. The current time should fall
1037
+ between these two values, but the interval between the two times may be only a few seconds. In practice
1038
+ the OCSP responder and clients clocks may not be precisely synchronized and so such a check may fail.
1039
+ To avoid this the -validity_period option can be used to specify an acceptable error range in seconds,
1040
+ the default value is 300 seconds.
1041
+
1042
+ </documentation>
1043
+ <input message="tns:Management.OCSPResponder.get_validity_periodRequest"/>
1044
+ <output message="tns:Management.OCSPResponder.get_validity_periodResponse"/>
1045
+ </operation>
1046
+ <operation name="set_status_age">
1047
+ <documentation>
1048
+ Sets the status ages (sec) for the OCSP response. If the notAfter time is omitted from a response then
1049
+ this means that new status information is immediately available. In this case the age of the
1050
+ notBefore field is checked to see it is not older than age seconds old. By default this additional
1051
+ check is not performed when -status_age is not specified.
1052
+
1053
+ </documentation>
1054
+ <input message="tns:Management.OCSPResponder.set_status_ageRequest"/>
1055
+ <output message="tns:Management.OCSPResponder.set_status_ageResponse"/>
1056
+ </operation>
1057
+ <operation name="get_status_age">
1058
+ <documentation>
1059
+ Gets the status ages (sec) for the OCSP response. If the notAfter time is omitted from a response then
1060
+ this means that new status information is immediately available. In this case the age of the
1061
+ notBefore field is checked to see it is not older than age seconds old. By default this additional
1062
+ check is not performed when -status_age is not specified.
1063
+
1064
+ </documentation>
1065
+ <input message="tns:Management.OCSPResponder.get_status_ageRequest"/>
1066
+ <output message="tns:Management.OCSPResponder.get_status_ageResponse"/>
1067
+ </operation>
1068
+ <operation name="set_description">
1069
+ <documentation>
1070
+ Sets the description for a set of OCSP responders.
1071
+
1072
+ This is an arbitrary field which can be used for any purpose.
1073
+
1074
+ </documentation>
1075
+ <input message="tns:Management.OCSPResponder.set_descriptionRequest"/>
1076
+ <output message="tns:Management.OCSPResponder.set_descriptionResponse"/>
1077
+ </operation>
1078
+ <operation name="get_description">
1079
+ <documentation>
1080
+ Gets the descriptions for a set of OCSP responders.
1081
+
1082
+ </documentation>
1083
+ <input message="tns:Management.OCSPResponder.get_descriptionRequest"/>
1084
+ <output message="tns:Management.OCSPResponder.get_descriptionResponse"/>
1085
+ </operation>
1086
+ <operation name="get_version">
1087
+ <documentation>
1088
+ Gets the version information for this interface.
1089
+
1090
+ </documentation>
1091
+ <input message="tns:Management.OCSPResponder.get_versionRequest"/>
1092
+ <output message="tns:Management.OCSPResponder.get_versionResponse"/>
1093
+ </operation>
1094
+ </portType>
1095
+
1096
+ <!-- binding -->
1097
+
1098
+ <binding name="Management.OCSPResponderBinding" type="tns:Management.OCSPResponderPortType">
1099
+ <soap:binding style="rpc" transport="http://schemas.xmlsoap.org/soap/http"/>
1100
+ <operation name="get_list">
1101
+ <documentation>
1102
+ Gets a list of all OCSP responders.
1103
+
1104
+ </documentation>
1105
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1106
+ <input>
1107
+ <soap:body
1108
+ use="encoded"
1109
+ namespace="urn:iControl:Management/OCSPResponder"
1110
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1111
+ </input>
1112
+ <output>
1113
+ <soap:body
1114
+ use="encoded"
1115
+ namespace="urn:iControl:Management/OCSPResponder"
1116
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1117
+ </output>
1118
+ </operation>
1119
+
1120
+ <operation name="create">
1121
+ <documentation>
1122
+ Creates the specified OCSP responders.
1123
+
1124
+ </documentation>
1125
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1126
+ <input>
1127
+ <soap:body
1128
+ use="encoded"
1129
+ namespace="urn:iControl:Management/OCSPResponder"
1130
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1131
+ </input>
1132
+ <output>
1133
+ <soap:body
1134
+ use="encoded"
1135
+ namespace="urn:iControl:Management/OCSPResponder"
1136
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1137
+ </output>
1138
+ </operation>
1139
+
1140
+ <operation name="delete_responder">
1141
+ <documentation>
1142
+ Deletes the specified OCSP responders.
1143
+
1144
+ </documentation>
1145
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1146
+ <input>
1147
+ <soap:body
1148
+ use="encoded"
1149
+ namespace="urn:iControl:Management/OCSPResponder"
1150
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1151
+ </input>
1152
+ <output>
1153
+ <soap:body
1154
+ use="encoded"
1155
+ namespace="urn:iControl:Management/OCSPResponder"
1156
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1157
+ </output>
1158
+ </operation>
1159
+
1160
+ <operation name="delete_all_responders">
1161
+ <documentation>
1162
+ Deletes all OCSP responders.
1163
+
1164
+ </documentation>
1165
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1166
+ <input>
1167
+ <soap:body
1168
+ use="encoded"
1169
+ namespace="urn:iControl:Management/OCSPResponder"
1170
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1171
+ </input>
1172
+ <output>
1173
+ <soap:body
1174
+ use="encoded"
1175
+ namespace="urn:iControl:Management/OCSPResponder"
1176
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1177
+ </output>
1178
+ </operation>
1179
+
1180
+ <operation name="set_url">
1181
+ <documentation>
1182
+ Sets the URLs of the responders.
1183
+
1184
+ </documentation>
1185
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1186
+ <input>
1187
+ <soap:body
1188
+ use="encoded"
1189
+ namespace="urn:iControl:Management/OCSPResponder"
1190
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1191
+ </input>
1192
+ <output>
1193
+ <soap:body
1194
+ use="encoded"
1195
+ namespace="urn:iControl:Management/OCSPResponder"
1196
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1197
+ </output>
1198
+ </operation>
1199
+
1200
+ <operation name="get_url">
1201
+ <documentation>
1202
+ Gets the URL or hostnames of the responders.
1203
+
1204
+ </documentation>
1205
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1206
+ <input>
1207
+ <soap:body
1208
+ use="encoded"
1209
+ namespace="urn:iControl:Management/OCSPResponder"
1210
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1211
+ </input>
1212
+ <output>
1213
+ <soap:body
1214
+ use="encoded"
1215
+ namespace="urn:iControl:Management/OCSPResponder"
1216
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1217
+ </output>
1218
+ </operation>
1219
+
1220
+ <operation name="set_ca_file">
1221
+ <documentation>
1222
+ Certificate files are officially managed as certificate file
1223
+ objects via the set_ca_file_v2 method and
1224
+ Management::KeyCertificate interface. Thus this method has been
1225
+ deprecated.
1226
+
1227
+ Sets the names of the trusted CA certificate files used by the
1228
+ responders to verify the signature on the OCSP response.
1229
+
1230
+ </documentation>
1231
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1232
+ <input>
1233
+ <soap:body
1234
+ use="encoded"
1235
+ namespace="urn:iControl:Management/OCSPResponder"
1236
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1237
+ </input>
1238
+ <output>
1239
+ <soap:body
1240
+ use="encoded"
1241
+ namespace="urn:iControl:Management/OCSPResponder"
1242
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1243
+ </output>
1244
+ </operation>
1245
+
1246
+ <operation name="get_ca_file">
1247
+ <documentation>
1248
+ Certificate files are officially managed as certificate file
1249
+ objects via the get_ca_file_v2 method and
1250
+ Management::KeyCertificate interface. Thus this method has been
1251
+ deprecated.
1252
+
1253
+ Gets the names of the trusted CA certificate files used by the
1254
+ responders to verify the signature on the OCSP response.
1255
+
1256
+ </documentation>
1257
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1258
+ <input>
1259
+ <soap:body
1260
+ use="encoded"
1261
+ namespace="urn:iControl:Management/OCSPResponder"
1262
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1263
+ </input>
1264
+ <output>
1265
+ <soap:body
1266
+ use="encoded"
1267
+ namespace="urn:iControl:Management/OCSPResponder"
1268
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1269
+ </output>
1270
+ </operation>
1271
+
1272
+ <operation name="set_ca_file_v2">
1273
+ <documentation>
1274
+ Sets the names of the certificate file objects holding the trusted
1275
+ CA certificates used by the responders to verify the signature on
1276
+ the OCSP response.
1277
+
1278
+ Certificate file objects are managed by the
1279
+ Management::KeyCertificate interface.
1280
+
1281
+ </documentation>
1282
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1283
+ <input>
1284
+ <soap:body
1285
+ use="encoded"
1286
+ namespace="urn:iControl:Management/OCSPResponder"
1287
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1288
+ </input>
1289
+ <output>
1290
+ <soap:body
1291
+ use="encoded"
1292
+ namespace="urn:iControl:Management/OCSPResponder"
1293
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1294
+ </output>
1295
+ </operation>
1296
+
1297
+ <operation name="get_ca_file_v2">
1298
+ <documentation>
1299
+ Gets the names of the certificate file objects holding the trusted
1300
+ CA certificates used by the responders to verify the signature on
1301
+ the OCSP response.
1302
+
1303
+ Certificate file objects are managed by the
1304
+ Management::KeyCertificate interface.
1305
+
1306
+ </documentation>
1307
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1308
+ <input>
1309
+ <soap:body
1310
+ use="encoded"
1311
+ namespace="urn:iControl:Management/OCSPResponder"
1312
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1313
+ </input>
1314
+ <output>
1315
+ <soap:body
1316
+ use="encoded"
1317
+ namespace="urn:iControl:Management/OCSPResponder"
1318
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1319
+ </output>
1320
+ </operation>
1321
+
1322
+ <operation name="set_ca_path">
1323
+ <documentation>
1324
+ Sets the paths of the trusted CA certificates used by the responders
1325
+ to verify the signature on the OCSP response.
1326
+
1327
+ </documentation>
1328
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1329
+ <input>
1330
+ <soap:body
1331
+ use="encoded"
1332
+ namespace="urn:iControl:Management/OCSPResponder"
1333
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1334
+ </input>
1335
+ <output>
1336
+ <soap:body
1337
+ use="encoded"
1338
+ namespace="urn:iControl:Management/OCSPResponder"
1339
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1340
+ </output>
1341
+ </operation>
1342
+
1343
+ <operation name="get_ca_path">
1344
+ <documentation>
1345
+ Gets the paths of the trusted CA certificates used by the responders
1346
+ to verify the signature on the OCSP response.
1347
+
1348
+ </documentation>
1349
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1350
+ <input>
1351
+ <soap:body
1352
+ use="encoded"
1353
+ namespace="urn:iControl:Management/OCSPResponder"
1354
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1355
+ </input>
1356
+ <output>
1357
+ <soap:body
1358
+ use="encoded"
1359
+ namespace="urn:iControl:Management/OCSPResponder"
1360
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1361
+ </output>
1362
+ </operation>
1363
+
1364
+ <operation name="set_other_certificate_file">
1365
+ <documentation>
1366
+ Certificate files are officially managed as certificate file
1367
+ objects via the set_other_certificate_file_v2 method and
1368
+ Management::KeyCertificate interface. Thus this method has been
1369
+ deprecated.
1370
+
1371
+ Sets the files containing additional certificates to search when attempting to locate
1372
+ the OCSP response signing certificate. Some responders omit the actual signer's
1373
+ certificates from the response: this option can be used to supply the necessary
1374
+ certificates in such cases.
1375
+
1376
+ </documentation>
1377
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1378
+ <input>
1379
+ <soap:body
1380
+ use="encoded"
1381
+ namespace="urn:iControl:Management/OCSPResponder"
1382
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1383
+ </input>
1384
+ <output>
1385
+ <soap:body
1386
+ use="encoded"
1387
+ namespace="urn:iControl:Management/OCSPResponder"
1388
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1389
+ </output>
1390
+ </operation>
1391
+
1392
+ <operation name="get_other_certificate_file">
1393
+ <documentation>
1394
+ Certificate files are officially managed as certificate file
1395
+ objects via the get_other_certificate_file_v2 method and
1396
+ Management::KeyCertificate interface. Thus this method has been
1397
+ deprecated.
1398
+
1399
+ Gets the files containing additional certificates to search when attempting to locate
1400
+ the OCSP response signing certificate. Some responders omit the actual signer's
1401
+ certificates from the response: this option can be used to supply the necessary
1402
+ certificates in such cases.
1403
+
1404
+ </documentation>
1405
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1406
+ <input>
1407
+ <soap:body
1408
+ use="encoded"
1409
+ namespace="urn:iControl:Management/OCSPResponder"
1410
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1411
+ </input>
1412
+ <output>
1413
+ <soap:body
1414
+ use="encoded"
1415
+ namespace="urn:iControl:Management/OCSPResponder"
1416
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1417
+ </output>
1418
+ </operation>
1419
+
1420
+ <operation name="set_other_certificate_file_v2">
1421
+ <documentation>
1422
+ Sets the names of the certificate file objects containing
1423
+ additional certificates to search when attempting to locate
1424
+ the OCSP response signing certificate. Some responders omit
1425
+ the actual signer's certificates from the response: this
1426
+ option can be used to supply the necessary certificates in
1427
+ such cases.
1428
+
1429
+ Certificate file objects are managed by the
1430
+ Management::KeyCertificate interface.
1431
+
1432
+ </documentation>
1433
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1434
+ <input>
1435
+ <soap:body
1436
+ use="encoded"
1437
+ namespace="urn:iControl:Management/OCSPResponder"
1438
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1439
+ </input>
1440
+ <output>
1441
+ <soap:body
1442
+ use="encoded"
1443
+ namespace="urn:iControl:Management/OCSPResponder"
1444
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1445
+ </output>
1446
+ </operation>
1447
+
1448
+ <operation name="get_other_certificate_file_v2">
1449
+ <documentation>
1450
+ Gets the names of the certificate file objects containing
1451
+ additional certificates to search when attempting to locate
1452
+ the OCSP response signing certificate. Some responders omit
1453
+ the actual signer's certificates from the response: this
1454
+ option can be used to supply the necessary certificates in
1455
+ such cases.
1456
+
1457
+ Certificate file objects are managed by the
1458
+ Management::KeyCertificate interface.
1459
+
1460
+ </documentation>
1461
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1462
+ <input>
1463
+ <soap:body
1464
+ use="encoded"
1465
+ namespace="urn:iControl:Management/OCSPResponder"
1466
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1467
+ </input>
1468
+ <output>
1469
+ <soap:body
1470
+ use="encoded"
1471
+ namespace="urn:iControl:Management/OCSPResponder"
1472
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1473
+ </output>
1474
+ </operation>
1475
+
1476
+ <operation name="set_trust_other_certificate_state">
1477
+ <documentation>
1478
+ Sets the states indicating whether to be explicitly trust the other certificates specified
1479
+ via set_other_certificate_file and no additional checks will be performed on them.
1480
+ This is useful when the complete responder certificate chain is not available or
1481
+ trusting a root CA is not appropriate.
1482
+
1483
+ </documentation>
1484
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1485
+ <input>
1486
+ <soap:body
1487
+ use="encoded"
1488
+ namespace="urn:iControl:Management/OCSPResponder"
1489
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1490
+ </input>
1491
+ <output>
1492
+ <soap:body
1493
+ use="encoded"
1494
+ namespace="urn:iControl:Management/OCSPResponder"
1495
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1496
+ </output>
1497
+ </operation>
1498
+
1499
+ <operation name="get_trust_other_certificate_state">
1500
+ <documentation>
1501
+ Gets the states indicating whether to be explicitly trust the other certificates specified
1502
+ via set_other_certificate_file and no additional checks will be performed on them.
1503
+ This is useful when the complete responder certificate chain is not available or
1504
+ trusting a root CA is not appropriate.
1505
+
1506
+ </documentation>
1507
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1508
+ <input>
1509
+ <soap:body
1510
+ use="encoded"
1511
+ namespace="urn:iControl:Management/OCSPResponder"
1512
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1513
+ </input>
1514
+ <output>
1515
+ <soap:body
1516
+ use="encoded"
1517
+ namespace="urn:iControl:Management/OCSPResponder"
1518
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1519
+ </output>
1520
+ </operation>
1521
+
1522
+ <operation name="set_va_file">
1523
+ <documentation>
1524
+ Certificate files are officially managed as certificate file
1525
+ objects via the set_va_file_v2 method and
1526
+ Management::KeyCertificate interface. Thus this method has been
1527
+ deprecated.
1528
+
1529
+ Sets the names of the files containing explicitly trusted responder
1530
+ certificates. This functionality is equivalent to having the other
1531
+ certificates specified via set_other_certificate_file, and setting
1532
+ the state via set_trust_other_certificate_state.
1533
+
1534
+ </documentation>
1535
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1536
+ <input>
1537
+ <soap:body
1538
+ use="encoded"
1539
+ namespace="urn:iControl:Management/OCSPResponder"
1540
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1541
+ </input>
1542
+ <output>
1543
+ <soap:body
1544
+ use="encoded"
1545
+ namespace="urn:iControl:Management/OCSPResponder"
1546
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1547
+ </output>
1548
+ </operation>
1549
+
1550
+ <operation name="get_va_file">
1551
+ <documentation>
1552
+ Certificate files are officially managed as certificate file
1553
+ objects via the get_va_file_v2 method and
1554
+ Management::KeyCertificate interface. Thus this method has been
1555
+ deprecated.
1556
+
1557
+ Gets the names of the files containing explicitly trusted responder
1558
+ certificates.
1559
+
1560
+ </documentation>
1561
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1562
+ <input>
1563
+ <soap:body
1564
+ use="encoded"
1565
+ namespace="urn:iControl:Management/OCSPResponder"
1566
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1567
+ </input>
1568
+ <output>
1569
+ <soap:body
1570
+ use="encoded"
1571
+ namespace="urn:iControl:Management/OCSPResponder"
1572
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1573
+ </output>
1574
+ </operation>
1575
+
1576
+ <operation name="set_va_file_v2">
1577
+ <documentation>
1578
+ Sets the name of the certificate file objects containing explicitly
1579
+ trusted responder certificates. This functionality is equivalent
1580
+ to having the other certificates specified via
1581
+ set_other_certificate_file, and setting the state via
1582
+ set_trust_other_certificate_state.
1583
+
1584
+ Certificate file objects are managed by the
1585
+ Management::KeyCertificate interface.
1586
+
1587
+ </documentation>
1588
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1589
+ <input>
1590
+ <soap:body
1591
+ use="encoded"
1592
+ namespace="urn:iControl:Management/OCSPResponder"
1593
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1594
+ </input>
1595
+ <output>
1596
+ <soap:body
1597
+ use="encoded"
1598
+ namespace="urn:iControl:Management/OCSPResponder"
1599
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1600
+ </output>
1601
+ </operation>
1602
+
1603
+ <operation name="get_va_file_v2">
1604
+ <documentation>
1605
+ Gets the names of the certificate file objects containing
1606
+ explicitly trusted responder certificates.
1607
+
1608
+ Certificate file objects are managed by the
1609
+ Management::KeyCertificate interface.
1610
+
1611
+ </documentation>
1612
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1613
+ <input>
1614
+ <soap:body
1615
+ use="encoded"
1616
+ namespace="urn:iControl:Management/OCSPResponder"
1617
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1618
+ </input>
1619
+ <output>
1620
+ <soap:body
1621
+ use="encoded"
1622
+ namespace="urn:iControl:Management/OCSPResponder"
1623
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1624
+ </output>
1625
+ </operation>
1626
+
1627
+ <operation name="set_signing_information">
1628
+ <documentation>
1629
+ Certificate and key files are officially managed as
1630
+ certificate and certificate key file objects via the
1631
+ set_signing_information_v2 method and
1632
+ Management::KeyCertificate interface. Thus this method has
1633
+ been deprecated.
1634
+
1635
+ Sets the signing information necessary to sign the OCSP requests.
1636
+
1637
+ </documentation>
1638
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1639
+ <input>
1640
+ <soap:body
1641
+ use="encoded"
1642
+ namespace="urn:iControl:Management/OCSPResponder"
1643
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1644
+ </input>
1645
+ <output>
1646
+ <soap:body
1647
+ use="encoded"
1648
+ namespace="urn:iControl:Management/OCSPResponder"
1649
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1650
+ </output>
1651
+ </operation>
1652
+
1653
+ <operation name="get_signing_information">
1654
+ <documentation>
1655
+ Certificate and key files are officially managed as file
1656
+ objects via the get_signing_information_v2 method and
1657
+ Management::KeyCertificate interface. Thus this method has
1658
+ been deprecated.
1659
+
1660
+ Gets the signing information necessary to sign the OCSP requests.
1661
+
1662
+ </documentation>
1663
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1664
+ <input>
1665
+ <soap:body
1666
+ use="encoded"
1667
+ namespace="urn:iControl:Management/OCSPResponder"
1668
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1669
+ </input>
1670
+ <output>
1671
+ <soap:body
1672
+ use="encoded"
1673
+ namespace="urn:iControl:Management/OCSPResponder"
1674
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1675
+ </output>
1676
+ </operation>
1677
+
1678
+ <operation name="set_signing_information_v2">
1679
+ <documentation>
1680
+ Sets the signing information necessary to sign the OCSP requests.
1681
+
1682
+ Certificate and certificate key file objects are managed by the
1683
+ Management::KeyCertificate interface.
1684
+
1685
+ </documentation>
1686
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1687
+ <input>
1688
+ <soap:body
1689
+ use="encoded"
1690
+ namespace="urn:iControl:Management/OCSPResponder"
1691
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1692
+ </input>
1693
+ <output>
1694
+ <soap:body
1695
+ use="encoded"
1696
+ namespace="urn:iControl:Management/OCSPResponder"
1697
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1698
+ </output>
1699
+ </operation>
1700
+
1701
+ <operation name="get_signing_information_v2">
1702
+ <documentation>
1703
+ Gets the signing information necessary to sign the OCSP requests.
1704
+
1705
+ Certificate and certificate key file objects are managed by the
1706
+ Management::KeyCertificate interface.
1707
+
1708
+ </documentation>
1709
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1710
+ <input>
1711
+ <soap:body
1712
+ use="encoded"
1713
+ namespace="urn:iControl:Management/OCSPResponder"
1714
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1715
+ </input>
1716
+ <output>
1717
+ <soap:body
1718
+ use="encoded"
1719
+ namespace="urn:iControl:Management/OCSPResponder"
1720
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1721
+ </output>
1722
+ </operation>
1723
+
1724
+ <operation name="set_certificate_id_digest_method">
1725
+ <documentation>
1726
+ Sets the digest algorithm for hashing the certificate information used to
1727
+ create the certificate ID that is sent to the responder.
1728
+
1729
+ </documentation>
1730
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1731
+ <input>
1732
+ <soap:body
1733
+ use="encoded"
1734
+ namespace="urn:iControl:Management/OCSPResponder"
1735
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1736
+ </input>
1737
+ <output>
1738
+ <soap:body
1739
+ use="encoded"
1740
+ namespace="urn:iControl:Management/OCSPResponder"
1741
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1742
+ </output>
1743
+ </operation>
1744
+
1745
+ <operation name="get_certificate_id_digest_method">
1746
+ <documentation>
1747
+ Gets the digest algorithm for hashing the certificate information used to
1748
+ create the certificate ID that is sent to the responder.
1749
+
1750
+ </documentation>
1751
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1752
+ <input>
1753
+ <soap:body
1754
+ use="encoded"
1755
+ namespace="urn:iControl:Management/OCSPResponder"
1756
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1757
+ </input>
1758
+ <output>
1759
+ <soap:body
1760
+ use="encoded"
1761
+ namespace="urn:iControl:Management/OCSPResponder"
1762
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1763
+ </output>
1764
+ </operation>
1765
+
1766
+ <operation name="set_ignore_aia_state">
1767
+ <documentation>
1768
+ Sets the states that if true, then always use the URL specified in the configuration file, and ignore
1769
+ any URL contained in the client certificates' authorityInfoAccess OCSP field. If this option is not
1770
+ set (the default) AND the client certificate has a valid AIA OCSP field set, then first attempt to
1771
+ connect to the responder in the client's AIA OCSP field, and fall back to the URL in the responder
1772
+ definition if that server is not available. See RFC2560 for more detail of the authorityInfoAccess
1773
+ x509 extension and its intended usage.
1774
+
1775
+ </documentation>
1776
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1777
+ <input>
1778
+ <soap:body
1779
+ use="encoded"
1780
+ namespace="urn:iControl:Management/OCSPResponder"
1781
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1782
+ </input>
1783
+ <output>
1784
+ <soap:body
1785
+ use="encoded"
1786
+ namespace="urn:iControl:Management/OCSPResponder"
1787
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1788
+ </output>
1789
+ </operation>
1790
+
1791
+ <operation name="get_ignore_aia_state">
1792
+ <documentation>
1793
+ Gets the states that if true, then always use the URL specified in the configuration file, and ignore
1794
+ any URL contained in the client certificates' authorityInfoAccess OCSP field. If this option is not
1795
+ set (the default) AND the client certificate has a valid AIA OCSP field set, then first attempt to
1796
+ connect to the responder in the client's AIA OCSP field, and fall back to the URL in the responder
1797
+ definition if that server is not available. See RFC2560 for more detail of the authorityInfoAccess
1798
+ x509 extension and its intended usage.
1799
+
1800
+ </documentation>
1801
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1802
+ <input>
1803
+ <soap:body
1804
+ use="encoded"
1805
+ namespace="urn:iControl:Management/OCSPResponder"
1806
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1807
+ </input>
1808
+ <output>
1809
+ <soap:body
1810
+ use="encoded"
1811
+ namespace="urn:iControl:Management/OCSPResponder"
1812
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1813
+ </output>
1814
+ </operation>
1815
+
1816
+ <operation name="set_allow_additional_certificate_state">
1817
+ <documentation>
1818
+ Sets the states that indicate whether to allow the addition of certificates to the OCSP request.
1819
+ This option should normally only be used for testing purposes.
1820
+
1821
+ </documentation>
1822
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1823
+ <input>
1824
+ <soap:body
1825
+ use="encoded"
1826
+ namespace="urn:iControl:Management/OCSPResponder"
1827
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1828
+ </input>
1829
+ <output>
1830
+ <soap:body
1831
+ use="encoded"
1832
+ namespace="urn:iControl:Management/OCSPResponder"
1833
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1834
+ </output>
1835
+ </operation>
1836
+
1837
+ <operation name="get_allow_additional_certificate_state">
1838
+ <documentation>
1839
+ Gets the states that that indicate whether to allow the addition of certificates to the OCSP request.
1840
+ This option should normally only be used for testing purposes.
1841
+
1842
+ </documentation>
1843
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1844
+ <input>
1845
+ <soap:body
1846
+ use="encoded"
1847
+ namespace="urn:iControl:Management/OCSPResponder"
1848
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1849
+ </input>
1850
+ <output>
1851
+ <soap:body
1852
+ use="encoded"
1853
+ namespace="urn:iControl:Management/OCSPResponder"
1854
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1855
+ </output>
1856
+ </operation>
1857
+
1858
+ <operation name="set_verification_state">
1859
+ <documentation>
1860
+ Sets the states that indicate whether to attempt to verify the OCSP response signature or the nonce
1861
+ values. This option will normally only be used for debugging since it disables all verification of
1862
+ the responders certificate.
1863
+
1864
+ </documentation>
1865
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1866
+ <input>
1867
+ <soap:body
1868
+ use="encoded"
1869
+ namespace="urn:iControl:Management/OCSPResponder"
1870
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1871
+ </input>
1872
+ <output>
1873
+ <soap:body
1874
+ use="encoded"
1875
+ namespace="urn:iControl:Management/OCSPResponder"
1876
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1877
+ </output>
1878
+ </operation>
1879
+
1880
+ <operation name="get_verification_state">
1881
+ <documentation>
1882
+ Gets the states that indicate whether to attempt to verify the OCSP response signature or the nonce
1883
+ values. This option will normally only be used for debugging since it disables all verification of
1884
+ the responders certificate.
1885
+
1886
+ </documentation>
1887
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1888
+ <input>
1889
+ <soap:body
1890
+ use="encoded"
1891
+ namespace="urn:iControl:Management/OCSPResponder"
1892
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1893
+ </input>
1894
+ <output>
1895
+ <soap:body
1896
+ use="encoded"
1897
+ namespace="urn:iControl:Management/OCSPResponder"
1898
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1899
+ </output>
1900
+ </operation>
1901
+
1902
+ <operation name="set_intern_state">
1903
+ <documentation>
1904
+ Sets the states that indicate whether to ignore certificates contained in the OCSP response when searching
1905
+ for the signers certificate. With this option the signers certificate must be specified with either
1906
+ the -verify_certs or -VAfile options.
1907
+
1908
+ </documentation>
1909
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1910
+ <input>
1911
+ <soap:body
1912
+ use="encoded"
1913
+ namespace="urn:iControl:Management/OCSPResponder"
1914
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1915
+ </input>
1916
+ <output>
1917
+ <soap:body
1918
+ use="encoded"
1919
+ namespace="urn:iControl:Management/OCSPResponder"
1920
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1921
+ </output>
1922
+ </operation>
1923
+
1924
+ <operation name="get_intern_state">
1925
+ <documentation>
1926
+ Gets the states that that indicate whether to ignore certificates contained in the OCSP response when searching
1927
+ for the signers certificate. With this option the signers certificate must be specified with either
1928
+ the -verify_certs or -VAfile options.
1929
+
1930
+ </documentation>
1931
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1932
+ <input>
1933
+ <soap:body
1934
+ use="encoded"
1935
+ namespace="urn:iControl:Management/OCSPResponder"
1936
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1937
+ </input>
1938
+ <output>
1939
+ <soap:body
1940
+ use="encoded"
1941
+ namespace="urn:iControl:Management/OCSPResponder"
1942
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1943
+ </output>
1944
+ </operation>
1945
+
1946
+ <operation name="set_nonce_state">
1947
+ <documentation>
1948
+ Sets the state that indicates whether to send a nonce in the OCSP request.
1949
+
1950
+ </documentation>
1951
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1952
+ <input>
1953
+ <soap:body
1954
+ use="encoded"
1955
+ namespace="urn:iControl:Management/OCSPResponder"
1956
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1957
+ </input>
1958
+ <output>
1959
+ <soap:body
1960
+ use="encoded"
1961
+ namespace="urn:iControl:Management/OCSPResponder"
1962
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1963
+ </output>
1964
+ </operation>
1965
+
1966
+ <operation name="get_nonce_state">
1967
+ <documentation>
1968
+ Gets the state that indicates whether to send a nonce in the OCSP request.
1969
+
1970
+ </documentation>
1971
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1972
+ <input>
1973
+ <soap:body
1974
+ use="encoded"
1975
+ namespace="urn:iControl:Management/OCSPResponder"
1976
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1977
+ </input>
1978
+ <output>
1979
+ <soap:body
1980
+ use="encoded"
1981
+ namespace="urn:iControl:Management/OCSPResponder"
1982
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1983
+ </output>
1984
+ </operation>
1985
+
1986
+ <operation name="set_signature_verification_state">
1987
+ <documentation>
1988
+ Sets the states that indicate whether to check the signature on the OCSP response. Since this option
1989
+ tolerates invalid signatures on OCSP responses it will normally only be used for testing purposes.
1990
+
1991
+ </documentation>
1992
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
1993
+ <input>
1994
+ <soap:body
1995
+ use="encoded"
1996
+ namespace="urn:iControl:Management/OCSPResponder"
1997
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
1998
+ </input>
1999
+ <output>
2000
+ <soap:body
2001
+ use="encoded"
2002
+ namespace="urn:iControl:Management/OCSPResponder"
2003
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2004
+ </output>
2005
+ </operation>
2006
+
2007
+ <operation name="get_signature_verification_state">
2008
+ <documentation>
2009
+ Gets the states that indicate whether to check the signature on the OCSP response. Since this option
2010
+ tolerates invalid signatures on OCSP responses it will normally only be used for testing purposes.
2011
+
2012
+ </documentation>
2013
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2014
+ <input>
2015
+ <soap:body
2016
+ use="encoded"
2017
+ namespace="urn:iControl:Management/OCSPResponder"
2018
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2019
+ </input>
2020
+ <output>
2021
+ <soap:body
2022
+ use="encoded"
2023
+ namespace="urn:iControl:Management/OCSPResponder"
2024
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2025
+ </output>
2026
+ </operation>
2027
+
2028
+ <operation name="set_certificate_verification_state">
2029
+ <documentation>
2030
+ Sets the states that indicate whether to check the certificates in the OCSP responses.
2031
+
2032
+ </documentation>
2033
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2034
+ <input>
2035
+ <soap:body
2036
+ use="encoded"
2037
+ namespace="urn:iControl:Management/OCSPResponder"
2038
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2039
+ </input>
2040
+ <output>
2041
+ <soap:body
2042
+ use="encoded"
2043
+ namespace="urn:iControl:Management/OCSPResponder"
2044
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2045
+ </output>
2046
+ </operation>
2047
+
2048
+ <operation name="get_certificate_verification_state">
2049
+ <documentation>
2050
+ Gets the states that indicate whether to check the certificates in the OCSP responses.
2051
+
2052
+ </documentation>
2053
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2054
+ <input>
2055
+ <soap:body
2056
+ use="encoded"
2057
+ namespace="urn:iControl:Management/OCSPResponder"
2058
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2059
+ </input>
2060
+ <output>
2061
+ <soap:body
2062
+ use="encoded"
2063
+ namespace="urn:iControl:Management/OCSPResponder"
2064
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2065
+ </output>
2066
+ </operation>
2067
+
2068
+ <operation name="set_chain_state">
2069
+ <documentation>
2070
+ Sets the states that indicate whether to use certificates in the response as additional untrusted CA
2071
+ certificates.
2072
+
2073
+ </documentation>
2074
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2075
+ <input>
2076
+ <soap:body
2077
+ use="encoded"
2078
+ namespace="urn:iControl:Management/OCSPResponder"
2079
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2080
+ </input>
2081
+ <output>
2082
+ <soap:body
2083
+ use="encoded"
2084
+ namespace="urn:iControl:Management/OCSPResponder"
2085
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2086
+ </output>
2087
+ </operation>
2088
+
2089
+ <operation name="get_chain_state">
2090
+ <documentation>
2091
+ Gets the states that indicate whether to use certificates in the response as additional untrusted CA
2092
+ certificates.
2093
+
2094
+ </documentation>
2095
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2096
+ <input>
2097
+ <soap:body
2098
+ use="encoded"
2099
+ namespace="urn:iControl:Management/OCSPResponder"
2100
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2101
+ </input>
2102
+ <output>
2103
+ <soap:body
2104
+ use="encoded"
2105
+ namespace="urn:iControl:Management/OCSPResponder"
2106
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2107
+ </output>
2108
+ </operation>
2109
+
2110
+ <operation name="set_certificate_check_state">
2111
+ <documentation>
2112
+ Sets the states that indicate whether to perform any additional checks on the OCSP response signers
2113
+ certificate. If false, do not make any checks to see if the signers certificate is authorized to
2114
+ provide the necessary status information: as a result this option should only be used for testing
2115
+ purposes.
2116
+
2117
+ </documentation>
2118
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2119
+ <input>
2120
+ <soap:body
2121
+ use="encoded"
2122
+ namespace="urn:iControl:Management/OCSPResponder"
2123
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2124
+ </input>
2125
+ <output>
2126
+ <soap:body
2127
+ use="encoded"
2128
+ namespace="urn:iControl:Management/OCSPResponder"
2129
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2130
+ </output>
2131
+ </operation>
2132
+
2133
+ <operation name="get_certificate_check_state">
2134
+ <documentation>
2135
+ Gets the states that indicate whether to perform any additional checks on the OCSP response signers
2136
+ certificate. If false, do not make any checks to see if the signers certificate is authorized to
2137
+ provide the necessary status information: as a result this option should only be used for testing
2138
+ purposes.
2139
+
2140
+ </documentation>
2141
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2142
+ <input>
2143
+ <soap:body
2144
+ use="encoded"
2145
+ namespace="urn:iControl:Management/OCSPResponder"
2146
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2147
+ </input>
2148
+ <output>
2149
+ <soap:body
2150
+ use="encoded"
2151
+ namespace="urn:iControl:Management/OCSPResponder"
2152
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2153
+ </output>
2154
+ </operation>
2155
+
2156
+ <operation name="set_explicit_state">
2157
+ <documentation>
2158
+ Sets the states that indicate whether to explicitly trust the OCSP response signers certificate as
2159
+ authorized for OCSP response signing. Specifying this option causes a response to be untrusted if
2160
+ the signers certificate does not contain the "OCSPSigning" extension.
2161
+
2162
+ </documentation>
2163
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2164
+ <input>
2165
+ <soap:body
2166
+ use="encoded"
2167
+ namespace="urn:iControl:Management/OCSPResponder"
2168
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2169
+ </input>
2170
+ <output>
2171
+ <soap:body
2172
+ use="encoded"
2173
+ namespace="urn:iControl:Management/OCSPResponder"
2174
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2175
+ </output>
2176
+ </operation>
2177
+
2178
+ <operation name="get_explicit_state">
2179
+ <documentation>
2180
+ Gets the states that indicate whether to explicitly trust the OCSP response signers certificate as
2181
+ authorized for OCSP response signing. Specifying this option causes a response to be untrusted if
2182
+ the signers certificate does not contain the "OCSPSigning" extension.
2183
+
2184
+ </documentation>
2185
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2186
+ <input>
2187
+ <soap:body
2188
+ use="encoded"
2189
+ namespace="urn:iControl:Management/OCSPResponder"
2190
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2191
+ </input>
2192
+ <output>
2193
+ <soap:body
2194
+ use="encoded"
2195
+ namespace="urn:iControl:Management/OCSPResponder"
2196
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2197
+ </output>
2198
+ </operation>
2199
+
2200
+ <operation name="set_validity_period">
2201
+ <documentation>
2202
+ Sets the range of times, in seconds, which will be tolerated in an OCSP response. Each certificate
2203
+ status response includes a notBefore time and an optional notAfter time. The current time should fall
2204
+ between these two values, but the interval between the two times may be only a few seconds. In practice
2205
+ the OCSP responder and clients clocks may not be precisely synchronized and so such a check may fail.
2206
+ To avoid this the -validity_period option can be used to specify an acceptable error range in seconds,
2207
+ the default value is 300 seconds.
2208
+
2209
+ </documentation>
2210
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2211
+ <input>
2212
+ <soap:body
2213
+ use="encoded"
2214
+ namespace="urn:iControl:Management/OCSPResponder"
2215
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2216
+ </input>
2217
+ <output>
2218
+ <soap:body
2219
+ use="encoded"
2220
+ namespace="urn:iControl:Management/OCSPResponder"
2221
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2222
+ </output>
2223
+ </operation>
2224
+
2225
+ <operation name="get_validity_period">
2226
+ <documentation>
2227
+ Gets the range of times, in seconds, which will be tolerated in an OCSP response. Each certificate
2228
+ status response includes a notBefore time and an optional notAfter time. The current time should fall
2229
+ between these two values, but the interval between the two times may be only a few seconds. In practice
2230
+ the OCSP responder and clients clocks may not be precisely synchronized and so such a check may fail.
2231
+ To avoid this the -validity_period option can be used to specify an acceptable error range in seconds,
2232
+ the default value is 300 seconds.
2233
+
2234
+ </documentation>
2235
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2236
+ <input>
2237
+ <soap:body
2238
+ use="encoded"
2239
+ namespace="urn:iControl:Management/OCSPResponder"
2240
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2241
+ </input>
2242
+ <output>
2243
+ <soap:body
2244
+ use="encoded"
2245
+ namespace="urn:iControl:Management/OCSPResponder"
2246
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2247
+ </output>
2248
+ </operation>
2249
+
2250
+ <operation name="set_status_age">
2251
+ <documentation>
2252
+ Sets the status ages (sec) for the OCSP response. If the notAfter time is omitted from a response then
2253
+ this means that new status information is immediately available. In this case the age of the
2254
+ notBefore field is checked to see it is not older than age seconds old. By default this additional
2255
+ check is not performed when -status_age is not specified.
2256
+
2257
+ </documentation>
2258
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2259
+ <input>
2260
+ <soap:body
2261
+ use="encoded"
2262
+ namespace="urn:iControl:Management/OCSPResponder"
2263
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2264
+ </input>
2265
+ <output>
2266
+ <soap:body
2267
+ use="encoded"
2268
+ namespace="urn:iControl:Management/OCSPResponder"
2269
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2270
+ </output>
2271
+ </operation>
2272
+
2273
+ <operation name="get_status_age">
2274
+ <documentation>
2275
+ Gets the status ages (sec) for the OCSP response. If the notAfter time is omitted from a response then
2276
+ this means that new status information is immediately available. In this case the age of the
2277
+ notBefore field is checked to see it is not older than age seconds old. By default this additional
2278
+ check is not performed when -status_age is not specified.
2279
+
2280
+ </documentation>
2281
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2282
+ <input>
2283
+ <soap:body
2284
+ use="encoded"
2285
+ namespace="urn:iControl:Management/OCSPResponder"
2286
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2287
+ </input>
2288
+ <output>
2289
+ <soap:body
2290
+ use="encoded"
2291
+ namespace="urn:iControl:Management/OCSPResponder"
2292
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2293
+ </output>
2294
+ </operation>
2295
+
2296
+ <operation name="set_description">
2297
+ <documentation>
2298
+ Sets the description for a set of OCSP responders.
2299
+
2300
+ This is an arbitrary field which can be used for any purpose.
2301
+
2302
+ </documentation>
2303
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2304
+ <input>
2305
+ <soap:body
2306
+ use="encoded"
2307
+ namespace="urn:iControl:Management/OCSPResponder"
2308
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2309
+ </input>
2310
+ <output>
2311
+ <soap:body
2312
+ use="encoded"
2313
+ namespace="urn:iControl:Management/OCSPResponder"
2314
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2315
+ </output>
2316
+ </operation>
2317
+
2318
+ <operation name="get_description">
2319
+ <documentation>
2320
+ Gets the descriptions for a set of OCSP responders.
2321
+
2322
+ </documentation>
2323
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2324
+ <input>
2325
+ <soap:body
2326
+ use="encoded"
2327
+ namespace="urn:iControl:Management/OCSPResponder"
2328
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2329
+ </input>
2330
+ <output>
2331
+ <soap:body
2332
+ use="encoded"
2333
+ namespace="urn:iControl:Management/OCSPResponder"
2334
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2335
+ </output>
2336
+ </operation>
2337
+
2338
+ <operation name="get_version">
2339
+ <documentation>
2340
+ Gets the version information for this interface.
2341
+
2342
+ </documentation>
2343
+ <soap:operation soapAction="urn:iControl:Management/OCSPResponder"/>
2344
+ <input>
2345
+ <soap:body
2346
+ use="encoded"
2347
+ namespace="urn:iControl:Management/OCSPResponder"
2348
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2349
+ </input>
2350
+ <output>
2351
+ <soap:body
2352
+ use="encoded"
2353
+ namespace="urn:iControl:Management/OCSPResponder"
2354
+ encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"/>
2355
+ </output>
2356
+ </operation>
2357
+ </binding>
2358
+
2359
+ <!-- service -->
2360
+
2361
+ <service name="Management.OCSPResponder">
2362
+ <documentation>
2363
+ The OCSPResponder interface enables you to manage OCSP responder configuration.
2364
+
2365
+ </documentation>
2366
+ <port name="Management.OCSPResponderPort" binding="tns:Management.OCSPResponderBinding">
2367
+ <soap:address location="https://url_to_service"/>
2368
+ </port>
2369
+ </service>
2370
+ </definitions>