package ca

Get desktop application:
View/edit binary Protocol Buffers messages

CRLGenerator signs CRLs. It is separated for the same reason as OCSPGenerator.

• rpc GenerateCRL (stream GenerateCRLRequest, stream GenerateCRLResponse)

  ca.proto:58

  message GenerateCRLRequest

  ca.proto:61

  • oneof payload

    • CRLMetadata metadata = 1

    • core.CRLEntry entry = 2

  message GenerateCRLResponse

  ca.proto:76

  • bytes chunk = 1

CertificateAuthority issues certificates.

• rpc IssueCertificate (IssueCertificateRequest, IssueCertificateResponse)

  ca.proto:12

  IssueCertificate issues a precertificate, gets SCTs, issues a certificate, and returns that.

  message IssueCertificateRequest

  ca.proto:15

  • bytes csr = 1

    Next unused field number: 6

  • int64 registrationID = 2

  • int64 orderID = 3

  • string certProfileName = 5

    certProfileName is a human readable name provided by the RA and used to determine if the CA can issue for that profile. A default name will be assigned inside the CA during *Profile construction if no name is provided. The value of this field should not be relied upon inside the RA.

  message IssueCertificateResponse

  ca.proto:29

  • bytes DER = 1

OCSPGenerator generates OCSP. We separate this out from CertificateAuthority so that we can restrict access to a different subset of hosts, so the hosts that need to request OCSP generation don't need to be able to request certificate issuance.

• rpc GenerateOCSP (GenerateOCSPRequest, OCSPResponse)

  ca.proto:38

  message GenerateOCSPRequest

  ca.proto:42

  Exactly one of certDER or [serial and issuerID] must be set.

  • string status = 2

    Next unused field number: 8

  • int32 reason = 3

  • optional google.protobuf.Timestamp revokedAt = 7

  • string serial = 5

  • int64 issuerID = 6

Used in: GenerateCRLRequest

• int64 issuerNameID = 1

  Next unused field number: 5

• optional google.protobuf.Timestamp thisUpdate = 4

• int64 shardIdx = 3

Used as response type in: OCSPGenerator.GenerateOCSP, ra.RegistrationAuthority.GenerateOCSP

• bytes response = 1