awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-05 07:26:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update API reference CRL docs

Browse Source
This commit is contained in:
Tuan Dang
2024-08-22 12:30:48 -07:00
parent b090ebfd41
commit 288f47f4bd
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/documentation/platform/pki/certificates.mdx
+9 -5
View File
@@ -203,21 +203,25 @@ openssl verify -verbose -crl_check -crl_download -CAfile chain.pem cert.pem
</Step> </Step>
<Step title="Obtaining a CRL"> <Step title="Obtaining a CRL">
In order to check the revocation status of a certificate, you can check it against the CRL of the issuing CA. In order to check the revocation status of a certificate, you can check it against the CRL of the issuing CA.
To obtain the CRL of the CA, make an API request to the [Get CRL](/api-reference/endpoints/certificate-authorities/crl) API endpoint. To obtain the CRLs of the CA, make an API request to the [List CRLs](/api-reference/endpoints/certificate-authorities/crls) API endpoint.
### Sample request ### Sample request
```bash Request ```bash Request
curl --location --request GET 'https://app.infisical.com/api/v1/pki/ca/<ca-id>/crl' \ curl --location --request GET 'https://app.infisical.com/api/v1/pki/ca/<ca-id>/crls' \
--header 'Authorization: Bearer <access-token>' --header 'Authorization: Bearer <access-token>'
``` ```
### Sample response ### Sample response
```bash Response ```bash Response
{ [
crl: "..." {
} id: "...",
crl: "..."
},
...
]
``` ```
To verify a certificate against the CRL with OpenSSL, you can use the following command: To verify a certificate against the CRL with OpenSSL, you can use the following command: