#-----------------------------------------------------------------------------
# /etc/check.d/certs.exp - expressions for check table of configuration params
#
# Copyright (c) 2001-2025  The Eisfair Team, team(at)eisfair(dot)org
#
# Creation:     2008-10-10  jed
# Last Update:  $Id$
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#-----------------------------------------------------------------------------

CERTS_HASH_ALGO    = 'sha1|sha224|sha256|sha384|sha512'
                   : 'only one of the following hash algorithms can be used to
                      sign certificate requests: sha1, sha224, sha256, sha384,
                      sha512.'
CERTS_EFQDN_PORT   = '(RE:EFQDN)|(RE:EFQDN):(RE:PORT)'
                   : 'only an empty string or a fully qualified domain name are
                      allowed. An optional port number can be appended to the
                      domain name, separated by a colon.'
CERTS_RSA_KEYBITS  = '1024|2048|4096|8192|secp256k1|secp384r1|secp512r1'
                   : 'only one of the following bit values can be used to create
                      new RSA/EC keys: 1024, 2048, 4096, 8192, secp256k1, secp384r1
                      secp512r1.'
CERTS_CCODE        = '[A-Z][A-Z]'
                   : 'a valid country code in upper-case letters need to be
                      entered, e.g. "DE", "NL", etc.'
CERTS_STATE        = '(RE:NOTEMPTY)'
                   : 'a state name need to be entered, e.g "Nordrhein-Westfalen".'
CERTS_LOCALITY     = '(RE:NOTEMPTY)'
                   : 'a city name need to be entered, e.g. "Koeln".'
CERTS_CA_ORGA_NAME = '(RE:NOTEMPTY)'
                   : 'an organziation name need to be entered, e.g. "eisfair CA".'
CERTS_CA_ORGA_UNIT = '(RE:NOTEMPTY)'
                   : 'an organziation unit name need to be entered, e.g. "My eisfair Certificate Authority".'
CERTS_CA_ADMIN     = '(RE:NONE){0,64}'
                   : 'a ca administrator name need to be entered, e.g. "John Doe".'
CERTS_REQ_NAME     = '(RE:NONE){0,64}'
                   : 'a name of the certificate requestor need to be entered, e.g. "John Doe".'
CERTS_EMAIL        = '(()|(RE:EMAILADDR)){0,60}'
                   : 'an empty string or a valid email address need to be entered.'