Sign in

v1

latestOpenAPI 3.0.12026-07-1719674.9 KB
fabric-ca-server

Get certificate(s).
The caller will be able to view certificates that it owns. In addition, if the caller has hf.Registrar.Roles or hf.Revoker attribute, it will be able to view certificates for identities that have affiliations equal to or below the caller's affiliation.

get/api/v1/certificates

Query parameters

idstring

The enrollment ID that uniquely identifies an identity

akistring

The AKI for a certificate

serialstring

The serial number for a certificate

revoked_startstring

Get revoked certificates starting at the specified time, either as timestamp (RFC3339 format) or duration (-30d)

revoked_endstring

Get revoked certificates before the specified time, either as timestamp (RFC3339 format) or duration (-15d)

expired_startstring

Get expired certificates starting at the specified time, either as timestamp (RFC3339 format) or duration (-30d)

expired_endstring

Get expired certificates before the specified time, either as timestamp (RFC3339 format) or duration (-15d)

notexpiredboolean

Don't return expired certificates

notrevokedboolean

Don't return revoked certificates

castring

The name of the CA to direct this request to within the server, or the default CA if not specified

Headers

Authorizationstring required

An enrollment token consisting of two base 64 encoded parts separated by a period:

  • an enrollment certificate;
  • a signature over the HTTP method, URL path, request body, and the certificate.

Response

The certificates that were retrieved.

{"stackTrail":"components:schemas:responseBase:properties:result","oasType":"schema","type":"unknown"}
successboolean required

Boolean indicating if the request was successful.