@@ -46,6 +46,24 @@ Should be sent to trusted nodes only.
46
46
- REST API:
47
47
- GET ` /dcl/pki/all-certificates `
48
48
49
+ #### GET_ALL_CERTS_BY_SUBJECT
50
+
51
+ ** Status: Implemented**
52
+
53
+ Gets all certificates associated with a subject. This query works for all types certificates (PAA, PAI, RCAC, ICAC).
54
+
55
+ Revoked certificates are not returned.
56
+ Use [ GET_ALL_REVOKED_DA_CERTS] ( #get_all_revoked_da_certs ) to get a list of all revoked DA certificates.
57
+ Use [ GET_ALL_REVOKED_NOC_ROOT_CERTS] ( #get_all_revoked_noc_root-rcacs ) to get a list of all revoked Noc Root certificates.
58
+ Use [ GET_ALL_REVOKED_NOC_ICA_CERTS] ( #get_all_revoked_noc_ica-icacs ) to get a list of all revoked Noc ICA certificates.
59
+
60
+ - Parameters:
61
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
62
+ - CLI command:
63
+ - ` dcld query pki all-subject-certs --subject=<base64 string> `
64
+ - REST API:
65
+ - GET ` /dcl/pki/all-certificates/{subject} `
66
+
49
67
#### GET_CHILD_CERTS
50
68
51
69
** Status: Implemented**
@@ -113,6 +131,7 @@ The PAA certificate is not active until sufficient number of Trustees approve it
113
131
- time: ` optional(int64) ` - proposal time (number of nanoseconds elapsed since January 1, 1970 UTC). This field cannot be specified using a CLI command and will use the current time by default.
114
132
- In State:
115
133
- ` pki/AllCertificates/value/<Certificate's Subject>/<Certificate's Subject Key ID> ` .
134
+ - ` pki/AllCertificatesBySubject/value/<Subject> ` .
116
135
- ` pki/ApprovedCertificates/value/<Certificate's Subject>/<Certificate's Subject Key ID> ` .
117
136
- ` pki/ApprovedCertificatesBySubject/value/<Certificate's Subject> `
118
137
- ` pki/ApprovedCertificatesBySubjectKeyId/value/<Certificate's Subject Key ID> ` .
@@ -693,6 +712,7 @@ This transaction adds a NOC root certificate (RCAC) owned by the Vendor.
693
712
- schemaVersion: ` optional(uint16) ` - Certificate's schema version to support backward/forward compatability. Should be equal to 0 (default 0)
694
713
- In State:
695
714
- ` pki/AllCertificates/value/<Subject>/<SubjectKeyID> `
715
+ - ` pki/AllCertificatesBySubject/value/<Subject> `
696
716
- ` pki/NocCertificates/value/<Subject>/<SubjectKeyID> `
697
717
- ` pki/NocRootCertificates/value/<VID> `
698
718
- ` pki/NocCertificatesBySubject/value/<Subject> `
@@ -779,6 +799,7 @@ already present on the ledger.
779
799
- certificate-schema-version: ` optional(uint16) ` - Certificate's schema version to support backward/forward compatability(default 0)
780
800
- In State:
781
801
- ` pki/AllCertificates/value/<Subject>/<SubjectKeyID> `
802
+ - ` pki/AllCertificatesBySubject/value/<Subject> `
782
803
- ` pki/NocCertificates/value/<Subject>/<SubjectKeyID> `
783
804
- ` pki/NocIcaCertificates/value/<VID> `
784
805
- ` pki/NocCertificatesBySubject/value/<Subject> `
@@ -847,7 +868,7 @@ Use [GET_REVOKED_NOC_ICA](#get_revoked_noc_ica-icac) to get a revoked ica certif
847
868
- CLI command:
848
869
- ` dcld query pki noc-x509-cert --subject=<base64 string> --subject-key-id=<hex string> `
849
870
- REST API:
850
- - GET ` /dcl/pki/noc-certificates/{subject}/{subject_key_id} `
871
+ - GET ` /dcl/pki/all- noc-certificates/{subject}/{subject_key_id} `
851
872
852
873
#### GET_NOC_ROOT_BY_VID (RCACs)
853
874
@@ -864,7 +885,7 @@ Use [GET_ALL_REVOKED_NOC_ROOT](#get_all_revoked_noc_root-rcacs) to get a list of
864
885
- CLI Command:
865
886
- ` dcld query pki noc-x509-root-certs --vid=<uint16> `
866
887
- REST API:
867
- - GET ` /dcl/pki/noc-root-certificates/{vid} `
888
+ - GET ` /dcl/pki/noc-vid- root-certificates/{vid} `
868
889
869
890
#### GET_NOC_BY_VID_AND_SKID (RCACs/ICACs)
870
891
@@ -884,7 +905,7 @@ Use [GET_ALL_REVOKED_NOC_ICA](#get_all_revoked_noc_ica-icacs) to get a list of a
884
905
- CLI Command:
885
906
- ` dcld query pki noc-x509-certs --vid=<uint16> --subject-key-id=<hex string> `
886
907
- REST API:
887
- - GET ` /dcl/pki/noc-certificates/{vid}/{subject_key_id} `
908
+ - GET ` /dcl/pki/noc-vid- certificates/{vid}/{subject_key_id} `
888
909
889
910
#### GET_NOC_ICA_BY_VID (ICACs)
890
911
@@ -901,7 +922,7 @@ Use [GET_ALL_REVOKED_CERT](#get_all_revoked_certs) to get a list of all revoked
901
922
- CLI Command:
902
923
- ` dcld query pki noc-x509-ica-certs --vid=<uint16> `
903
924
- REST API:
904
- - GET ` /dcl/pki/noc-ica-certificates/{vid} `
925
+ - GET ` /dcl/pki/noc-vid- ica-certificates/{vid} `
905
926
906
927
#### GET_NOC_CERTS_BY_SUBJECT
907
928
@@ -918,7 +939,7 @@ Use [GET_ALL_REVOKED_NOC_ICA](#get_all_revoked_noc_ica-icacs) to get a list of a
918
939
- CLI command:
919
940
- ` dcld query pki all-noc-subject-x509-certs --subject=<base64 string> `
920
941
- REST API:
921
- - GET ` /dcl/pki/noc-certificates/{subject} `
942
+ - GET ` /dcl/pki/all- noc-certificates/{subject} `
922
943
923
944
#### GET_REVOKED_NOC_ROOT (RCAC)
924
945
@@ -968,7 +989,7 @@ Use [GET_ALL_REVOKED_NOC_ICA](#get_all_revoked_noc_ica-icacs) to get a list of a
968
989
- CLI Command:
969
990
- ` dcld query pki all-noc-x509-certs `
970
991
- REST API:
971
- - GET ` /dcl/pki/noc-certificates `
992
+ - GET ` /dcl/pki/all- noc-certificates `
972
993
973
994
#### GET_ALL_NOC_ROOT (RCACs)
974
995
0 commit comments