fortios.vpn/certificate.Ca
Explore with Pulumi AI
CA certificate.
Create Ca Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Ca(name: string, args: CaArgs, opts?: CustomResourceOptions);
@overload
def Ca(resource_name: str,
args: CaArgs,
opts: Optional[ResourceOptions] = None)
@overload
def Ca(resource_name: str,
opts: Optional[ResourceOptions] = None,
ca: Optional[str] = None,
obsolete: Optional[str] = None,
range: Optional[str] = None,
ca_identifier: Optional[str] = None,
est_url: Optional[str] = None,
fabric_ca: Optional[str] = None,
last_updated: Optional[int] = None,
auto_update_days_warning: Optional[int] = None,
auto_update_days: Optional[int] = None,
name: Optional[str] = None,
scep_url: Optional[str] = None,
source: Optional[str] = None,
source_ip: Optional[str] = None,
ssl_inspection_trusted: Optional[str] = None,
trusted: Optional[str] = None,
vdomparam: Optional[str] = None)
func NewCa(ctx *Context, name string, args CaArgs, opts ...ResourceOption) (*Ca, error)
public Ca(string name, CaArgs args, CustomResourceOptions? opts = null)
type: fortios:vpn/certificate/ca:Ca
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args CaArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CaArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CaArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CaArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CaArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Ca Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Ca resource accepts the following input properties:
- Certificate string
- CA certificate as a PEM file.
- Auto
Update intDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- Auto
Update intDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- Ca
Identifier string - CA identifier of the SCEP server.
- Est
Url string - URL of the EST server.
- Fabric
Ca string - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - Last
Updated int - Time at which CA was last updated.
- Name string
- Name.
- Obsolete string
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - Range string
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - Scep
Url string - URL of the SCEP server.
- Source string
- CA certificate source type.
- Source
Ip string - Source IP address for communications to the SCEP server.
- Ssl
Inspection stringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - Trusted string
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Ca string
- CA certificate as a PEM file.
- Auto
Update intDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- Auto
Update intDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- Ca
Identifier string - CA identifier of the SCEP server.
- Est
Url string - URL of the EST server.
- Fabric
Ca string - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - Last
Updated int - Time at which CA was last updated.
- Name string
- Name.
- Obsolete string
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - Range string
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - Scep
Url string - URL of the SCEP server.
- Source string
- CA certificate source type.
- Source
Ip string - Source IP address for communications to the SCEP server.
- Ssl
Inspection stringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - Trusted string
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- ca String
- CA certificate as a PEM file.
- auto
Update IntegerDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto
Update IntegerDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca
Identifier String - CA identifier of the SCEP server.
- est
Url String - URL of the EST server.
- fabric
Ca String - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last
Updated Integer - Time at which CA was last updated.
- name String
- Name.
- obsolete String
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range String
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep
Url String - URL of the SCEP server.
- source String
- CA certificate source type.
- source
Ip String - Source IP address for communications to the SCEP server.
- ssl
Inspection StringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted String
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- ca string
- CA certificate as a PEM file.
- auto
Update numberDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto
Update numberDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca
Identifier string - CA identifier of the SCEP server.
- est
Url string - URL of the EST server.
- fabric
Ca string - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last
Updated number - Time at which CA was last updated.
- name string
- Name.
- obsolete string
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range string
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep
Url string - URL of the SCEP server.
- source string
- CA certificate source type.
- source
Ip string - Source IP address for communications to the SCEP server.
- ssl
Inspection stringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted string
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- ca str
- CA certificate as a PEM file.
- auto_
update_ intdays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto_
update_ intdays_ warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca_
identifier str - CA identifier of the SCEP server.
- est_
url str - URL of the EST server.
- fabric_
ca str - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last_
updated int - Time at which CA was last updated.
- name str
- Name.
- obsolete str
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range str
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep_
url str - URL of the SCEP server.
- source str
- CA certificate source type.
- source_
ip str - Source IP address for communications to the SCEP server.
- ssl_
inspection_ strtrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted str
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- ca String
- CA certificate as a PEM file.
- auto
Update NumberDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto
Update NumberDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca
Identifier String - CA identifier of the SCEP server.
- est
Url String - URL of the EST server.
- fabric
Ca String - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last
Updated Number - Time at which CA was last updated.
- name String
- Name.
- obsolete String
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range String
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep
Url String - URL of the SCEP server.
- source String
- CA certificate source type.
- source
Ip String - Source IP address for communications to the SCEP server.
- ssl
Inspection StringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted String
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Outputs
All input properties are implicitly available as output properties. Additionally, the Ca resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Id string
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
- id string
- The provider-assigned unique ID for this managed resource.
- id str
- The provider-assigned unique ID for this managed resource.
- id String
- The provider-assigned unique ID for this managed resource.
Look up Existing Ca Resource
Get an existing Ca resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CaState, opts?: CustomResourceOptions): Ca
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
auto_update_days: Optional[int] = None,
auto_update_days_warning: Optional[int] = None,
ca: Optional[str] = None,
ca_identifier: Optional[str] = None,
est_url: Optional[str] = None,
fabric_ca: Optional[str] = None,
last_updated: Optional[int] = None,
name: Optional[str] = None,
obsolete: Optional[str] = None,
range: Optional[str] = None,
scep_url: Optional[str] = None,
source: Optional[str] = None,
source_ip: Optional[str] = None,
ssl_inspection_trusted: Optional[str] = None,
trusted: Optional[str] = None,
vdomparam: Optional[str] = None) -> Ca
func GetCa(ctx *Context, name string, id IDInput, state *CaState, opts ...ResourceOption) (*Ca, error)
public static Ca Get(string name, Input<string> id, CaState? state, CustomResourceOptions? opts = null)
public static Ca get(String name, Output<String> id, CaState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Auto
Update intDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- Auto
Update intDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- Ca
Identifier string - CA identifier of the SCEP server.
- Certificate string
- CA certificate as a PEM file.
- Est
Url string - URL of the EST server.
- Fabric
Ca string - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - Last
Updated int - Time at which CA was last updated.
- Name string
- Name.
- Obsolete string
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - Range string
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - Scep
Url string - URL of the SCEP server.
- Source string
- CA certificate source type.
- Source
Ip string - Source IP address for communications to the SCEP server.
- Ssl
Inspection stringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - Trusted string
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- Auto
Update intDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- Auto
Update intDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- Ca string
- CA certificate as a PEM file.
- Ca
Identifier string - CA identifier of the SCEP server.
- Est
Url string - URL of the EST server.
- Fabric
Ca string - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - Last
Updated int - Time at which CA was last updated.
- Name string
- Name.
- Obsolete string
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - Range string
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - Scep
Url string - URL of the SCEP server.
- Source string
- CA certificate source type.
- Source
Ip string - Source IP address for communications to the SCEP server.
- Ssl
Inspection stringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - Trusted string
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - Vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- auto
Update IntegerDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto
Update IntegerDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca String
- CA certificate as a PEM file.
- ca
Identifier String - CA identifier of the SCEP server.
- est
Url String - URL of the EST server.
- fabric
Ca String - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last
Updated Integer - Time at which CA was last updated.
- name String
- Name.
- obsolete String
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range String
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep
Url String - URL of the SCEP server.
- source String
- CA certificate source type.
- source
Ip String - Source IP address for communications to the SCEP server.
- ssl
Inspection StringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted String
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- auto
Update numberDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto
Update numberDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca string
- CA certificate as a PEM file.
- ca
Identifier string - CA identifier of the SCEP server.
- est
Url string - URL of the EST server.
- fabric
Ca string - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last
Updated number - Time at which CA was last updated.
- name string
- Name.
- obsolete string
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range string
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep
Url string - URL of the SCEP server.
- source string
- CA certificate source type.
- source
Ip string - Source IP address for communications to the SCEP server.
- ssl
Inspection stringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted string
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam string
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- auto_
update_ intdays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto_
update_ intdays_ warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca str
- CA certificate as a PEM file.
- ca_
identifier str - CA identifier of the SCEP server.
- est_
url str - URL of the EST server.
- fabric_
ca str - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last_
updated int - Time at which CA was last updated.
- name str
- Name.
- obsolete str
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range str
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep_
url str - URL of the SCEP server.
- source str
- CA certificate source type.
- source_
ip str - Source IP address for communications to the SCEP server.
- ssl_
inspection_ strtrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted str
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam str
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
- auto
Update NumberDays - Number of days to wait before requesting an updated CA certificate (0 - 4294967295, 0 = disabled).
- auto
Update NumberDays Warning - Number of days before an expiry-warning message is generated (0 - 4294967295, 0 = disabled).
- ca String
- CA certificate as a PEM file.
- ca
Identifier String - CA identifier of the SCEP server.
- est
Url String - URL of the EST server.
- fabric
Ca String - Enable/disable synchronization of CA across Security Fabric. Valid values:
disable
,enable
. - last
Updated Number - Time at which CA was last updated.
- name String
- Name.
- obsolete String
- Enable/disable this CA as obsoleted. Valid values:
disable
,enable
. - range String
- Either global or VDOM IP address range for the CA certificate. Valid values:
global
,vdom
. - scep
Url String - URL of the SCEP server.
- source String
- CA certificate source type.
- source
Ip String - Source IP address for communications to the SCEP server.
- ssl
Inspection StringTrusted - Enable/disable this CA as a trusted CA for SSL inspection. Valid values:
enable
,disable
. - trusted String
- Enable/disable as a trusted CA. Valid values:
enable
,disable
. - vdomparam String
- Specifies the vdom to which the resource will be applied when the FortiGate unit is running in VDOM mode. Only one vdom can be specified. If you want to inherit the vdom configuration of the provider, please do not set this parameter.
Import
VpnCertificate Ca can be imported using any of these accepted formats:
$ pulumi import fortios:vpn/certificate/ca:Ca labelname {{name}}
If you do not want to import arguments of block:
$ export “FORTIOS_IMPORT_TABLE”=“false”
$ pulumi import fortios:vpn/certificate/ca:Ca labelname {{name}}
$ unset “FORTIOS_IMPORT_TABLE”
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- fortios pulumiverse/pulumi-fortios
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
fortios
Terraform Provider.