List the OpenSSH Certificate Authority(ies)

200 OpenSSH Certificate Authority list

Array [

id

string (Internal ID) required

Object internal ID

enroll

boolean required

If true, this Certificate Authority can sign publicKey

enforceKeyUnicity

boolean required

If true, each enrollment request must have a unique key

krlPolicy

object (KRL Generation Policy) required

Define how to generate the KRL fot his OpenSSH Certificate Authority

validity

string required

The duration of the KRL's validity

hardGeneration

string

The KRL will be generated at each period

lazyGeneration

string

The KRL will be checked at each period and generated if a new entry was added

publicKey

string required

The public key of the SSHSigner

name

string required

This signer's name

privateKey

object (Signer Private Key) required

This signer's private key

keystore

string required

The Keystore in which the key is stored

name

string required

The name of the key in the keystore

hashAlgorithm

string (Hash Algorithm)

The Hash Algorithm to use when signing with this key

Enum SHA1 SHA224 SHA256 SHA384 SHA512 SHA3_224 SHA3_256 SHA3_384 SHA3_512

usePSS

boolean

For RSA Keys in PKCS11 Keystores only: use the PSS signature algorithm

overridePermissions

object (OpenSSH Certificate Authority Override Permissions)

type

boolean

Can the openssh certificate type be overridden

backdate

boolean

Can the backdate be overridden

lifetime

boolean

Can the lifetime be overridden

triggers

object (TriggersCertificateAuthority)

Triggers that apply on events on this OpenSSH Certificate Authority (CA)

onKRLGeneration

array of string

Name of the triggers to execute when this CA's KRL are generated (manually or via cron)

onKRLGenerationError

array of string

Name of the triggers to execute when an error occurs when this CA's KRL are generated (manually or via cron)

onKRLGenerationRecover

array of string

Name of the triggers to execute when this CA's KRL are successfully generated when the last status was error

onKRLSync

array of string

Name of the triggers to execute when this CA's KRL are synced

onKRLSyncError

array of string

Name of the triggers to execute when this CA's KRL sync fail

queue

string

The name of the queue to apply on this signer's operations

]

204 No OpenSSH Certificate Authority defined

400 Bad Request

401 Unauthorized request

403 Forbidden action

500 Internal Server error