PKI EST GETCACERT

Level

pki,modify LICENCE PKI

History

Appears in 3.10.0

Description

Import the root CA for EST certificates

Cache category

pki

Usage

url=<HTTPS base URL>
TLSCa=<CA name for TLS server trust>
caname=<EST CA name on SNS side>
[alias=<alias>] EST alias if server provides multiple CAs
[bindaddr=<host or IP>]
[bindport<port>]

Example

PKI EST GETCACERT TLSCa="CN=ManagementCA O=EJBCA Sample C=SE" alias=ecdsa_est caname=ECDSA_EST_CA url=https://managementca:8442/
PKI EST GETCACERT TLSCa="CN=estExampleCA" url=https://testrfc7030.com:8443/

Format

section

Returns

In case of success :
101 code=00a01000 msg="Begin" format="section"
[Result]
CA=<CA name>
100 code=00a00100 msg="Ok"

110 code=02c02600 msg="Duplicated names"

In case of error (example):
200 code=02c06700 msg="EST server does not respond correctly"