Stanisław Pitucha f1ed12e2cf Implement new API format

Signing requests are expected to arrive at

/v1/sign/<registration_authority>

now. Virtual registration authority is a new concept which right now includes
everything the original configuration included. That means for example each
registration authority available within Anchor deployment can configure its own
CA, auth, and validators. Clients request a specific registration authority via
the URL. This does not mean they can just choose who signs the CSR - they still
need to pass all checks. Only the guesswork of "which validation set applies to
them" is gone because of this change.

The previous concept of validator sets is gone. Each registration authority
configures its own validators and all of them need to pass.

Previous endpoint /sign will not work anymore. It's incompatible with
the new design.

The configuration file changes in the following way:
1. Registration authorities need to be defined in the main config.
2. Validator sets are not available anymore.
3. CA and auth settings at the top level need to be named. They can be referred
   to in the registration authority block.
4. Old names are removed. Any use of "auth", "ca", or "validators" at the top
   level will result in an error and explanation regarding the upgrade path.

Further documentation and a sample config with the new layout can be found in
the docs/configuration.rst file.

Closes-bug: 1463752
Change-Id: I5a949e0c79a2d56eadadf5ece62bb8b8eea89e78

2015-08-20 11:32:28 +10:00

665 B

Raw Blame History

API version 1

The following endpoints are available in version 1 of the API.

/robots.txt (GET)

Prevents attempts to index the service.

/v1/sign/<registration_authority> (POST)

Requests signing of the CSR provided in the POST parameters. The request is processed by the selected virtual registration authority.

Request parameters

user: username used in authentication (optional)
secret: secret used in authentication
encoding: request encoding - currently supported: "pem"
csr: the text of the submitted CSR

Result

Signed certificate

665 B Raw Blame History