Importing a CRL

Function

Imports the CRL chains of the root certificates of the service platform, software repository, and image repository interconnected with MEF Center, and cancels the RESTful request access permission of the interconnected third-party platform with revoked certificates. If this API is called repeatedly, the imported CRL will be updated. After the CRL of the interconnected service platform is imported, you need to manually restart MEF Center for the modification to take effect.

Syntax

Operation type: POST

URL: https://{ip}:{port}/certmanager/v1/crl/import

Request message body:
{
    "crlName": crlName,
    "crl": crl
}

Request Parameters

Table 1 Description

Parameter

Type

Description

Value

crlName

String

Usage of the imported CRL

  • north: CRL of the integrated platform
  • software: root CRL of a software repository
  • image: CRL of an image repository

crl

String

Base64-encoded CRL in PEM format

  • The CRL must be encoded using Base64.
  • The CRL must be in PEM format.
  • The CRL must have the same number of levels as the certificate chain corresponding to crlName.
  • The CRL is valid.
  • The CRL must contain the revocation list signed by each level of the certificate chain corresponding to crlName.

Usage Example

Request:

POST https://10.10.10.10:30035/certmanager/v1/crl/import
Request message body:
{
    "crlName": software,
    "crl": crl
}
Response:
{
    "status": "00000000",
    "msg": "success"
}

Response status code: 200

Output Description

Table 2 Operation output description

Parameter

Type

Description

status

String

Error code

msg

String

Description