Certificates

Reconcile local state with Apple

Changed on

Marks locally-known certificates Apple no longer lists as REVOKED and imports certificates Apple has that we don't (metadata only, no private key).

post/appsec/7.0/apple/certificates/reconcile

Request

Response

Certificates after reconciliation

idinteger
appleCertIdstring nullable

Apple's /v1/certificates resource id.

certificateTypestring
displayNamestring nullable
serialNumberstring nullable
expiresAtinteger nullable

Expiry in epoch millis (from the X.509 notAfter).

status'ACTIVE' | 'REVOKED' | 'EXPIRED'
privateKeyPresentboolean

True if we hold the private key (a .p12 can be downloaded); false for imported/reconciled certs.

Changes

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status