package ca

Get desktop application:
View/edit binary Protocol Buffers messages

CRLGenerator signs CRLs. It is separated for the same reason as OCSPGenerator.

• rpc GenerateCRL (stream GenerateCRLRequest, stream GenerateCRLResponse)

  ca.proto:35

  message GenerateCRLRequest

  ca.proto:38

  • oneof payload

    • CRLMetadata metadata = 1

    • core.CRLEntry entry = 2

  message GenerateCRLResponse

  ca.proto:53

  • bytes chunk = 1

CertificateAuthority issues certificates.

• rpc IssueCertificate (IssueCertificateRequest, IssueCertificateResponse)

  ca.proto:12

  IssueCertificate issues a precertificate, gets SCTs, issues a certificate, and returns that.

  message IssueCertificateRequest

  ca.proto:15

  • bytes csr = 1

    Next unused field number: 6

  • int64 registrationID = 2

  • int64 orderID = 3

  • string certProfileName = 5

    certProfileName is a human readable name provided by the RA and used to determine if the CA can issue for that profile. A default name will be assigned inside the CA during *Profile construction if no name is provided. The value of this field should not be relied upon inside the RA.

  message IssueCertificateResponse

  ca.proto:29

  • bytes DER = 1

Used in: GenerateCRLRequest

• int64 issuerNameID = 1

  Next unused field number: 5

• optional google.protobuf.Timestamp thisUpdate = 4

• int64 shardIdx = 3