12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455 |
- THE CSR GENERATING ENDPOINT
- Endpoint: /api/v1/cfssl/newkey
- Method: POST
- Required parameters:
- * hosts: the list of SANs (subject alternative names) for the
- requested CSR (certificate signing request)
- * names: the certificate subject for the requested CSR
- Optional parameters:
- * CN: the common name for the certificate subject in the requested
- CSR.
- * key: the key algorithm and size for the newly generated private key,
- default to ECDSA-256
- * ca: the CA configuration of the requested CSR, including CA pathlen
- and CA default expiry
- Result:
- The returned result is a JSON object with three keys:
- * private key: a PEM-encoded private key
- * certificate_request: a PEM-encoded certificate request
- * sums: a JSON object holding both MD5 and SHA1 digests for the certificate
- request
- Example:
- $ curl -d '{"hosts":["www.example.com"], "names":[{"C":"US", "ST":"California", "L":"San Francisco", "O":"example.com"}], "CN": "www.example.com"}' \
- ${CFSSL_HOST}/api/v1/cfssl/newkey \
- | python -m json.tool
- % Total % Received % Xferd Average Speed Time Time Time Current
- Dload Upload Total Spent Left Speed
- 100 1132 100 997 100 135 80572 10909 --:--:-- --:--:-- --:--:-- 83083
- {
- "errors": [],
- "messages": [],
- "result": {
- "certificate_request": "-----BEGIN CERTIFICATE REQUEST-----\nMIIBUTCB+QIBADBqMQswCQYDVQQGEwJVUzEUMBIGA1UEChMLZXhhbXBsZS5jb20x\nFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xEzARBgNVBAgTCkNhbGlmb3JuaWExGDAW\nBgNVBAMTD3d3dy5leGFtcGxlLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\nBKjGougrsMC6d8+kD4iACNHEGxo3SR4rhg/6n3HWlH4c9f2lNT92juNggq6cakNw\n5LexZmwHDi970YPgdFVSrJWgLTArBgkqhkiG9w0BCQ4xHjAcMBoGA1UdEQQTMBGC\nD3d3dy5leGFtcGxlLmNvbTAKBggqhkjOPQQDAgNHADBEAiBAfw0rotVugRtcqKWF\nnU9DwHXC7nKP4RUVodJo1oGuOwIgYH3hDgSMFsheuvhdzt7ZvLutWHkk6yIRLxJr\ncGsO9/c=\n-----END CERTIFICATE REQUEST-----\n",
- "private_key": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIO4Nlcbg29aPBqrBowuONq5U2HlvE/xOaCV65gXZ7NPQoAoGCCqGSM49\nAwEHoUQDQgAEqMai6CuwwLp3z6QPiIAI0cQbGjdJHiuGD/qfcdaUfhz1/aU1P3aO\n42CCrpxqQ3Dkt7FmbAcOL3vRg+B0VVKslQ==\n-----END EC PRIVATE KEY-----\n",
- "sums": {
- "certificate_request": {
- "md5": "95E25336DA65B58DA250C3B5FAA4B97F",
- "sha-1": "5F1ACE9D14F55E95FAA246A80474873C14E0F42F"
- }
- }
- },
- "success": true
- }
|