Certificate Manager Private CA API, gRPC: PrivateCaService.GenerateCertificateAuthorityByCsr
Generates a Certificate Authority (CA) by using a Certificate Signing Request (CSR).
This allows using an externally provided CSR to finalize CA creation.
gRPC request
rpc GenerateCertificateAuthorityByCsr (GenerateCertificateAuthorityByCsrRequest) returns (operation.Operation)
GenerateCertificateAuthorityByCsrRequest
{
"folder_id": "string",
"parent_certificate_authority_id": "string",
"name": "string",
"description": "string",
"csr": "string",
"private_key": "string",
"ttl_days": "int64",
"end_entities_ttl_limit_days": "int64",
"template_id": "string",
"enable_crl": "bool",
"enable_ocsp": "bool",
"deletion_protection": "bool"
}
Request to generate a Certificate Authority (CA) from a Certificate Signing Request (CSR).
|
Field |
Description |
|
folder_id |
string Required field. Folder ID where the CA is being created. The maximum string length in characters is 50. |
|
parent_certificate_authority_id |
string Optional. If set intermediate CA would be generated and signed on parent CA The maximum string length in characters is 50. |
|
name |
string Required field. The name of the Certificate Authority. Value must match the regular expression |
|
description |
string An optional description of the Certificate Authority. The maximum string length in characters is 1024. |
|
csr |
string Required field. The PEM-encoded Certificate Signing Request (CSR) content. |
|
private_key |
string Optional. The PEM-encoded private key linked to the certificate. If absent CA would be issued with server side generated key pair |
|
ttl_days |
int64 The Time-To-Live (TTL) in days for the CA. Acceptable values are 1 to 20000, inclusive. |
|
end_entities_ttl_limit_days |
int64 TTL limit in days for end-entities signed by the CA. The maximum value is 20000. |
|
template_id |
string Optional template ID to fill certificate fields with template data. Explicitly defined parameters is preferred The maximum string length in characters is 50. |
|
enable_crl |
bool Enable Certificate Revocation List (CRL) support. |
|
enable_ocsp |
bool Enable Online Certificate Status Protocol (OCSP) support. |
|
deletion_protection |
bool Protect the CA from accidental deletion. |
operation.Operation
{
"id": "string",
"description": "string",
"created_at": "google.protobuf.Timestamp",
"created_by": "string",
"modified_at": "google.protobuf.Timestamp",
"done": "bool",
"metadata": "google.protobuf.Any",
// Includes only one of the fields `error`, `response`
"error": "google.rpc.Status",
"response": "google.protobuf.Any"
// end of the list of possible fields
}
An Operation resource. For more information, see Operation.
|
Field |
Description |
|
id |
string ID of the operation. |
|
description |
string Description of the operation. 0-256 characters long. |
|
created_at |
Creation timestamp. |
|
created_by |
string ID of the user or service account who initiated the operation. |
|
modified_at |
The time when the Operation resource was last modified. |
|
done |
bool If the value is |
|
metadata |
Service-specific metadata associated with the operation. |
|
error |
The error result of the operation in case of failure or cancellation. Includes only one of the fields The operation result. |
|
response |
The normal response of the operation in case of success. Includes only one of the fields The operation result. |