with-plugin.yml

external-url-prefix: "http://test.test"
plugin-modules: ["example_plugin.encrypt_echo"]
keysets:
  testing-ca:
    path-prefix: keys-rsa
    keys:
      root:
        path: root.key.pem
        password: secret
      interm:
        path: interm.key.pem
        password: secret
      signer1:
        path: signer.key.pem
        password: secret

pki-architectures:
  testing-ca:
    keyset: testing-ca
    entity-defaults:
      country-name: BE
      organization-name: Testing Authority
    entities:
      root:
        common-name: Root CA
      interm:
        common-name: Intermediate CA
      signer1:
        organizational-unit-name: Signers
        common-name: Alice
    certs:
      root:
        issuer: root
        validity:
          valid-from: "2000-01-01T00:00:00+0000"
          valid-to: "2500-01-01T00:00:00+0000"
        extensions:
          - id: basic_constraints
            critical: true
            value:
              ca: true
          - id: key_usage
            critical: true
            smart-value:
              schema: key-usage
              params: [digital_signature, key_cert_sign, crl_sign]
      interm:
        issuer: root
        validity:
          valid-from: "2000-01-01T00:00:00+0000"
          valid-to: "2100-01-01T00:00:00+0000"
        extensions:
          - id: basic_constraints
            critical: true
            value:
              ca: true
              path-len-constraint: 0
          - id: key_usage
            critical: true
            smart-value:
              schema: key-usage
              params: [digital_signature, key_cert_sign, crl_sign]
      recipient1:
        subject: signer1
        issuer: interm
        validity:
          valid-from: "2020-01-01T00:00:00+0000"
          valid-to: "2022-01-01T00:00:00+0000"
        extensions:
          - id: key_usage
            critical: true
            smart-value:
              schema: key-usage
              params: [key_encipherment]
    services:
      plugin:
        encrypt-echo:
          test-endpoint:
            recipient: recipient1