INinfisical
PKI Certificate Authorities

PUT /api/v1/cert-manager/ca/internal/{caId}/cross-signed-certificate

Import or replace the cross-signed certificate of an internal CA. Certificates the CA and its internal sub-CAs issue afterwards carry it in their chain. An intermediate CA signed through sign-intermediate gets the CA's own chain without it. Certificates already issued keep their chain.

Request

Path parameters

caIdstring uuid required

The ID of the CA to import the cross-signed certificate for.

Request body

certificatestring required

The PEM-encoded cross-signed certificate: the CA's certificate signed by the old CA as a CA certificate. It must have the same subject, public key, and subject key identifier as the CA.

certificateChainstring required

The PEM-encoded certificates of the old CA, in order: start with the CA that signed the cross-signed certificate and end with its root. When the old root signed it directly, this is the old root's certificate.

Response

Default Response

Changes