@@ -685,7 +685,7 @@ Approves the proposed root certificate.
685
685
The certificate is not active until sufficient number of Trustees approve it.
686
686
687
687
- Parameters:
688
- - subject: ` string ` - proposed certificates's ` Subject ` in base64 format
688
+ - subject: ` string ` - proposed certificates's ` Subject ` is base64 encoded subject DER sequence bytes
689
689
- subject_key_id: ` string ` - proposed certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
690
690
- info: ` optional(string) ` - information/notes for the approval
691
691
- time: ` optional(int64) ` - approval time (number of nanoseconds elapsed since January 1, 1970 UTC). CLI uses the current time for that field.
@@ -707,7 +707,7 @@ Rejects the proposed root certificate.
707
707
The certificate is not reject until sufficient number of Trustees reject it.
708
708
709
709
- Parameters:
710
- - subject: ` string ` - proposed certificates's ` Subject ` in base64 format
710
+ - subject: ` string ` - proposed certificates's ` Subject ` is base64 encoded subject DER sequence bytes
711
711
- subject_key_id: ` string ` - proposed certificates's ` Subject Key Id ` in hex string format, e.g:
712
712
` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
713
713
- info: ` optional(string) ` - information/notes for the reject
@@ -763,7 +763,7 @@ Only the owner (sender) can revoke the certificate.
763
763
Root certificates can not be revoked this way, use ` PROPOSE_X509_CERT_REVOC ` and ` APPROVE_X509_ROOT_CERT_REVOC ` instead.
764
764
765
765
- Parameters:
766
- - subject: ` string ` - certificates's ` Subject ` in base64 format
766
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
767
767
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
768
768
- info: ` optional(string) ` - information/notes for the revocation
769
769
- time: ` optional(int64) ` - revocation time (number of nanoseconds elapsed since January 1, 1970 UTC). CLI uses the current time for that field.
@@ -785,7 +785,7 @@ If more than 1 Trustee signature is required to revoke a root certificate,
785
785
then the certificate will be in a pending state until sufficient number of other Trustee's approvals is received.
786
786
787
787
- Parameters:
788
- - subject: ` string ` - certificates's ` Subject ` in base64 format
788
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
789
789
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
790
790
- info: ` optional(string) ` - information/notes for the revocation proposal
791
791
- time: ` optional(int64) ` - revocation proposal time (number of nanoseconds elapsed since January 1, 1970 UTC). CLI uses the current time for that field.
@@ -805,7 +805,7 @@ All the certificates in the chain signed by the revoked certificate will be revo
805
805
The revocation is not applied until sufficient number of Trustees approve it.
806
806
807
807
- Parameters:
808
- - subject: ` string ` - certificates's ` Subject ` in base64 format
808
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
809
809
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
810
810
- info: ` optional(string) ` - information/notes for the revocation approval
811
811
- time: ` optional(int64) ` - revocation approval time (number of nanoseconds elapsed since January 1, 1970 UTC). CLI uses the current time for that field.
@@ -826,7 +826,7 @@ Revoked certificates are not returned.
826
826
Use ` GET_ALL_REVOKED_X509_CERTS ` to get a list of all revoked certificates.
827
827
828
828
- Parameters:
829
- - subject: ` string ` - certificates's ` Subject ` in base64 format
829
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
830
830
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
831
831
- CLI command:
832
832
- ` dcld query pki x509-cert --subject=<base64 string> --subject-key-id=<hex string> `
@@ -843,7 +843,7 @@ Revoked certificates are not returned.
843
843
Use ` GET_ALL_REVOKED_X509_CERTS ` to get a list of all revoked certificates.
844
844
845
845
- Parameters:
846
- - subject: ` string ` - certificates's ` Subject ` in base64 format
846
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
847
847
- CLI command:
848
848
- ` dcld query pki all-subject-x509-certs (--subject=<base64 string> `
849
849
- REST API:
@@ -857,7 +857,7 @@ Gets all child certificates for the given certificate.
857
857
Revoked certificates are not returned.
858
858
859
859
- Parameters:
860
- - subject: ` string ` - certificates's ` Subject ` in base64 string format
860
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
861
861
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
862
862
- CLI command:
863
863
- ` dcld query pki all-child-x509-certs (--subject=<base64 string> --subject-key-id=<hex string> `
@@ -871,7 +871,7 @@ Revoked certificates are not returned.
871
871
Gets a proposed but not approved root certificate with the given subject and subject key ID attributes.
872
872
873
873
- Parameters:
874
- - subject: ` string ` - certificates's ` Subject ` in base64 format
874
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
875
875
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
876
876
- CLI command:
877
877
- ` dcld query pki proposed-x509-root-cert --subject=<base64 string> --subject-key-id=<hex string> `
@@ -885,7 +885,7 @@ Gets a proposed but not approved root certificate with the given subject and sub
885
885
Get a rejected root certificate with the given subject and subject key ID attributes.
886
886
887
887
- Parameters:
888
- - subject: ` string ` - certificates's ` Subject ` in base64 format
888
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
889
889
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
890
890
- CLI command:
891
891
- ` dcld query pki rejected-x509-root-cert --subject=<base64 string> --subject-key-id=<hex string> `
@@ -899,7 +899,7 @@ Get a rejected root certificate with the given subject and subject key ID attrib
899
899
Gets a revoked certificate (either root, intermediate or leaf) by the given subject and subject key ID attributes.
900
900
901
901
- Parameters:
902
- - subject: ` string ` - certificates's ` Subject ` in base64 format
902
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
903
903
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
904
904
- CLI command:
905
905
- ` dcld query pki revoked-x509-cert --subject=<base64 string> --subject-key-id=<hex string> `
@@ -913,7 +913,7 @@ Gets a revoked certificate (either root, intermediate or leaf) by the given subj
913
913
Gets a proposed but not approved root certificate to be revoked.
914
914
915
915
- Parameters:
916
- - subject: ` string ` - certificates's ` Subject ` in base64 format
916
+ - subject: ` string ` - certificates's ` Subject ` is base64 encoded subject DER sequence bytes
917
917
- subject_key_id: ` string ` - certificates's ` Subject Key Id ` in hex string format, e.g: ` 5A:88:0E:6C:36:53:D0:7F:B0:89:71:A3:F4:73:79:09:30:E6:2B:DB `
918
918
- CLI command:
919
919
- ` dcld query pki proposed-x509-root-cert-to-revoke --subject=<base64 string> --subject-key-id=<hex string> `
0 commit comments