package sa
Get desktop application:
View/edit binary Protocol Buffers messages
service StorageAuthority
sa.proto:44StorageAuthority provides full read/write access to the database.
rpc AddBlockedKey (, )
sa.proto:76Adders
message
sa.proto:307bytes keyHash = 1
int64 added = 2
Unix timestamp (nanoseconds)
string source = 3
string comment = 4
int64 revokedBy = 5
rpc AddCertificate (, )
sa.proto:77message
sa.proto:218string digest = 1
rpc AddPrecertificate (, )
sa.proto:78rpc AddSerial (, )
sa.proto:79message
sa.proto:198int64 regID = 1
string serial = 2
int64 created = 3
Unix timestamp (nanoseconds)
int64 expires = 4
Unix timestamp (nanoseconds)
rpc CountCertificatesByNames (, )
sa.proto:46Getters: this list must be identical to the StorageAuthorityReadOnly rpcs.
rpc CountFQDNSets (, )
sa.proto:47rpc CountOrders (, )
sa.proto:49rpc CountRegistrationsByIP (, )
sa.proto:51rpc DeactivateAuthorization2 (, )
sa.proto:80rpc DeactivateRegistration (, )
sa.proto:81rpc FQDNSetExists (, )
sa.proto:53rpc FinalizeAuthorization2 (, )
sa.proto:82message
sa.proto:297int64 id = 1
string status = 2
int64 expires = 3
Unix timestamp (nanoseconds)
string attempted = 4
repeated validationRecords = 5
optional validationError = 6
int64 attemptedAt = 7
Unix timestamp (nanoseconds)
rpc FinalizeOrder (, )
sa.proto:83message
sa.proto:253int64 id = 1
string certificateSerial = 2
rpc GetAuthorization2 (, )
sa.proto:55rpc GetAuthorizations2 (, )
sa.proto:56rpc GetCertificate (, )
sa.proto:57rpc GetCertificateStatus (, )
sa.proto:58rpc GetMaxExpiration (, )
sa.proto:59rpc GetOrder (, )
sa.proto:60rpc GetOrderForNames (, )
sa.proto:61rpc GetPendingAuthorization2 (, )
sa.proto:62rpc GetPrecertificate (, )
sa.proto:63rpc GetRegistration (, )
sa.proto:64rpc GetRegistrationByKey (, )
sa.proto:65rpc GetRevocationStatus (, )
sa.proto:66rpc GetRevokedCerts (, stream )
sa.proto:67rpc GetSerialMetadata (, )
sa.proto:68rpc GetValidAuthorizations2 (, )
sa.proto:69rpc IncidentsForSerial (, )
sa.proto:71rpc KeyBlocked (, )
sa.proto:72rpc NewAuthorizations2 (, )
sa.proto:84message
sa.proto:272repeated authz = 1
message
sa.proto:284repeated int64 ids = 1
rpc NewOrder (, )
sa.proto:85rpc NewOrderAndAuthzs (, )
sa.proto:86message
sa.proto:233optional newOrder = 1
repeated newAuthzs = 2
rpc NewRegistration (, )
sa.proto:87rpc PreviousCertificateExists (, )
sa.proto:73rpc RevokeCertificate (, )
sa.proto:88rpc SerialsForIncident (, stream )
sa.proto:74rpc SetOrderError (, )
sa.proto:89message
sa.proto:238int64 id = 1
optional error = 2
rpc SetOrderProcessing (, )
sa.proto:90rpc UpdateRegistration (, )
sa.proto:91rpc UpdateRevokedCertificate (, )
sa.proto:92
StorageAuthorityReadOnly exposes only those SA methods which are read-only.
rpc CountCertificatesByNames (, )
sa.proto:12rpc CountFQDNSets (, )
sa.proto:13rpc CountOrders (, )
sa.proto:15rpc CountRegistrationsByIP (, )
sa.proto:17rpc FQDNSetExists (, )
sa.proto:19rpc GetAuthorization2 (, )
sa.proto:21rpc GetAuthorizations2 (, )
sa.proto:22rpc GetCertificate (, )
sa.proto:23rpc GetCertificateStatus (, )
sa.proto:24rpc GetMaxExpiration (, )
sa.proto:25rpc GetOrder (, )
sa.proto:26rpc GetOrderForNames (, )
sa.proto:27rpc GetPendingAuthorization2 (, )
sa.proto:28rpc GetPrecertificate (, )
sa.proto:29rpc GetRegistration (, )
sa.proto:30rpc GetRegistrationByKey (, )
sa.proto:31rpc GetRevocationStatus (, )
sa.proto:32rpc GetRevokedCerts (, stream )
sa.proto:33rpc GetSerialMetadata (, )
sa.proto:34rpc GetValidAuthorizations2 (, )
sa.proto:35rpc IncidentsForSerial (, )
sa.proto:37rpc KeyBlocked (, )
sa.proto:38rpc PreviousCertificateExists (, )
sa.proto:39rpc SerialsForIncident (, stream )
sa.proto:40
message
sa.proto:205Used as request type in: StorageAuthority.AddCertificate, StorageAuthority.AddPrecertificate
bytes der = 1
int64 regID = 2
bytes ocsp = 3
A signed OCSP response for the certificate contained in "der". Note: The certificate status in the OCSP response is assumed to be 0 (good).
int64 issued = 4
An issued time. When not present the SA defaults to using the current time. The orphan-finder uses this parameter to add certificates with the correct historic issued date
int64 issuerID = 5
message
sa.proto:103string id = 1
message
sa.proto:280Used as request type in: StorageAuthority.DeactivateAuthorization2, StorageAuthority.GetAuthorization2, StorageAuthorityReadOnly.GetAuthorization2
int64 id = 1
message
sa.proto:276repeated string ids = 1
message
sa.proto:264Used as response type in: StorageAuthority.GetAuthorizations2, StorageAuthority.GetValidAuthorizations2, StorageAuthority.GetValidOrderAuthorizations2, StorageAuthorityReadOnly.GetAuthorizations2, StorageAuthorityReadOnly.GetValidAuthorizations2, StorageAuthorityReadOnly.GetValidOrderAuthorizations2
repeated authz = 1
message
sa.proto:265Used in:
string domain = 1
optional authz = 2
message
sa.proto:145Used as response type in: StorageAuthority.CountFQDNSets, StorageAuthority.CountInvalidAuthorizations2, StorageAuthority.CountOrders, StorageAuthority.CountPendingAuthorizations2, StorageAuthority.CountRegistrationsByIP, StorageAuthority.CountRegistrationsByIPRange, StorageAuthorityReadOnly.CountFQDNSets, StorageAuthorityReadOnly.CountInvalidAuthorizations2, StorageAuthorityReadOnly.CountOrders, StorageAuthorityReadOnly.CountPendingAuthorizations2, StorageAuthorityReadOnly.CountRegistrationsByIP, StorageAuthorityReadOnly.CountRegistrationsByIPRange
int64 count = 1
message
sa.proto:158Used as response type in: StorageAuthority.CountCertificatesByNames, StorageAuthorityReadOnly.CountCertificatesByNames
map<string, int64> counts = 1
optional earliest = 2
Unix timestamp (nanoseconds)
message
sa.proto:153Used as request type in: StorageAuthority.CountCertificatesByNames, StorageAuthorityReadOnly.CountCertificatesByNames
optional range = 1
repeated string names = 2
message
sa.proto:180Used as request type in: StorageAuthority.CountFQDNSets, StorageAuthority.FQDNSetTimestampsForWindow, StorageAuthorityReadOnly.CountFQDNSets, StorageAuthorityReadOnly.FQDNSetTimestampsForWindow
int64 window = 1
repeated string domains = 2
message
sa.proto:168Used as request type in: StorageAuthority.CountInvalidAuthorizations2, StorageAuthorityReadOnly.CountInvalidAuthorizations2
int64 registrationID = 1
string hostname = 2
optional range = 3
Count authorizations that expire in this range.
message
sa.proto:175Used as request type in: StorageAuthority.CountOrders, StorageAuthorityReadOnly.CountOrders
int64 accountID = 1
optional range = 2
message
sa.proto:163Used as request type in: StorageAuthority.CountRegistrationsByIP, StorageAuthority.CountRegistrationsByIPRange, StorageAuthorityReadOnly.CountRegistrationsByIP, StorageAuthorityReadOnly.CountRegistrationsByIPRange
bytes ip = 1
optional range = 2
message
sa.proto:194Used as response type in: StorageAuthority.FQDNSetExists, StorageAuthority.KeyBlocked, StorageAuthority.PreviousCertificateExists, StorageAuthorityReadOnly.FQDNSetExists, StorageAuthorityReadOnly.KeyBlocked, StorageAuthorityReadOnly.PreviousCertificateExists
bool exists = 1
message
sa.proto:185Used as request type in: StorageAuthority.FQDNSetExists, StorageAuthorityReadOnly.FQDNSetExists
repeated string domains = 1
message
sa.proto:258Used as request type in: StorageAuthority.GetAuthorizations2, StorageAuthorityReadOnly.GetAuthorizations2
int64 registrationID = 1
repeated string domains = 2
int64 now = 3
Unix timestamp (nanoseconds)
message
sa.proto:248Used as request type in: StorageAuthority.GetOrderForNames, StorageAuthorityReadOnly.GetOrderForNames
int64 acctID = 1
repeated string names = 2
message
sa.proto:107Used as request type in: StorageAuthority.GetPendingAuthorization2, StorageAuthorityReadOnly.GetPendingAuthorization2
int64 registrationID = 1
string identifierType = 2
string identifierValue = 3
int64 validUntil = 4
Result must be valid until at least this Unix timestamp (nanos)
message
sa.proto:342Used as request type in: StorageAuthority.GetRevokedCerts, StorageAuthorityReadOnly.GetRevokedCerts
int64 issuerNameID = 1
int64 expiresAfter = 2
Unix timestamp (nanoseconds), inclusive
int64 expiresBefore = 3
Unix timestamp (nanoseconds), exclusive
int64 revokedBefore = 4
Unix timestamp (nanoseconds)
message
sa.proto:115Used as request type in: StorageAuthority.GetValidAuthorizations2, StorageAuthorityReadOnly.GetValidAuthorizations2
int64 registrationID = 1
repeated string domains = 2
int64 now = 3
Unix timestamp (nanoseconds)
message
sa.proto:243Used as request type in: StorageAuthority.GetValidOrderAuthorizations2, StorageAuthorityReadOnly.GetValidOrderAuthorizations2
int64 id = 1
int64 acctID = 2
message
sa.proto:319Used in:
int64 id = 1
string serialTable = 2
string url = 3
int64 renewBy = 4
Unix timestamp (nanoseconds)
bool enabled = 5
message
sa.proto:335Used as response type in: StorageAuthority.SerialsForIncident, StorageAuthorityReadOnly.SerialsForIncident
string serial = 1
int64 registrationID = 2
int64 orderID = 3
int64 lastNoticeSent = 4
Unix timestamp (nanoseconds)
message
sa.proto:327Used as response type in: StorageAuthority.IncidentsForSerial, StorageAuthorityReadOnly.IncidentsForSerial
repeated incidents = 1
message
sa.proto:99Used as request type in: StorageAuthority.GetRegistrationByKey, StorageAuthorityReadOnly.GetRegistrationByKey
bytes jwk = 1
message
sa.proto:315Used as request type in: StorageAuthority.KeyBlocked, StorageAuthorityReadOnly.KeyBlocked
bytes keyHash = 1
message
sa.proto:226Used as request type in: StorageAuthority.NewOrder
Used as field type in:
int64 registrationID = 1
int64 expires = 2
repeated string names = 3
repeated int64 v2Authorizations = 4
message
sa.proto:222Used as request type in: StorageAuthority.GetOrder, StorageAuthority.SetOrderProcessing, StorageAuthorityReadOnly.GetOrder
int64 id = 1
message
sa.proto:189Used as request type in: StorageAuthority.PreviousCertificateExists, StorageAuthorityReadOnly.PreviousCertificateExists
string domain = 1
int64 regID = 2
message
sa.proto:140Used in: , , ,
int64 earliest = 1
Unix timestamp (nanoseconds)
int64 latest = 2
Unix timestamp (nanoseconds)
message
sa.proto:95Used as request type in: StorageAuthority.CountPendingAuthorizations2, StorageAuthority.DeactivateRegistration, StorageAuthority.GetRegistration, StorageAuthorityReadOnly.CountPendingAuthorizations2, StorageAuthorityReadOnly.GetRegistration
int64 id = 1
message
sa.proto:349Used as response type in: StorageAuthority.GetRevocationStatus, StorageAuthorityReadOnly.GetRevocationStatus
int64 status = 1
int64 revokedReason = 2
optional revokedDate = 3
Unix timestamp (nanoseconds)
message
sa.proto:288Used as request type in: StorageAuthority.RevokeCertificate, StorageAuthority.UpdateRevokedCertificate
string serial = 1
int64 reason = 2
int64 date = 3
Unix timestamp (nanoseconds)
int64 backdate = 5
Unix timestamp (nanoseconds)
bytes response = 4
int64 issuerID = 6
message
sa.proto:129Used as request type in: StorageAuthority.GetCertificate, StorageAuthority.GetCertificateStatus, StorageAuthority.GetPrecertificate, StorageAuthority.GetRevocationStatus, StorageAuthority.GetSerialMetadata, StorageAuthority.IncidentsForSerial, StorageAuthorityReadOnly.GetCertificate, StorageAuthorityReadOnly.GetCertificateStatus, StorageAuthorityReadOnly.GetPrecertificate, StorageAuthorityReadOnly.GetRevocationStatus, StorageAuthorityReadOnly.GetSerialMetadata, StorageAuthorityReadOnly.IncidentsForSerial
string serial = 1
message
sa.proto:133Used as response type in: StorageAuthority.GetSerialMetadata, StorageAuthorityReadOnly.GetSerialMetadata
string serial = 1
int64 registrationID = 2
int64 created = 3
Unix timestamp (nanoseconds)
int64 expires = 4
Unix timestamp (nanoseconds)
message
sa.proto:331Used as request type in: StorageAuthority.SerialsForIncident, StorageAuthorityReadOnly.SerialsForIncident
string incidentTable = 1
message
sa.proto:149Used as response type in: StorageAuthority.FQDNSetTimestampsForWindow, StorageAuthorityReadOnly.FQDNSetTimestampsForWindow
repeated int64 timestamps = 1
Unix timestamp (nanoseconds)
message
sa.proto:121repeated valid = 1
message
sa.proto:122Used in:
string domain = 1
optional authz = 2