云证书导入

云证书导入

一、请求说明

• 请求地址：http://IP:PORT/openapi/kms/v1/cloud-cert/import
• 服务接口名称(即公共参数method的值)： cloud-cert/import
• 请求方式：POST

二、请求参数

名称	类型	是否必须	描述
csrId	String	是	证书请求csrId
signCert	String	是	签名证书(BASE64)
encCert	String	是	加密证书(BASE64)
privateKey	String	是	加密证书私钥key(BASE64)
enc	Integer	否	私钥加密格式 0-未加密 1-Sm2Cipher 2-Sm4Cipher(不传默认Sm4Cipher格式)
managerId	String	是	密钥主人ID
managerName	String	是	密钥主人名称
authPublicKeys	Set<String>	是	密钥主人公钥列表

三、响应参数

data 结果信息	类型	描述
certId	String	证书ID

四、成功示例

JSON示例

{
    "code":0,
    "message":"success",
    "requestId":"xxx",
    "data":{
        "certId":"xxx"
    }
}

五、失败示例

JSON示例

{
    "code": 10100,
    "message": "证书请求Id为空",
    "requestId":"xxx",
}

六、SDK请求示例

        // 提供的URL
        String url = "http://localhost:9200";

        // 您的appKey
        String appKey = "CLxUIrYIO0";

        // 您的appSecret
        String appSecret = "Rsl7kjMrqHrxhDk9uou23IYRnCVjRKJC";

        // 1.原客户端
        PkiClient pkiClient = new PkiOkhttpClient(url, appKey, appSecret);

        CertImportRequest request = new CertImportRequest();

        //证书请求csrId
        request.setCsrId("xxx");

        //签名证书(BASE64)
        request.setSignCert("MIICPDCCAeOgAwIBAgINAPqtsPTS5HURANTFszAKBggqgRzPVQGDdTBJMQswCQYDVQQGEwJDTjESMBAGA1UECAwJ5rGf6IuP55yBMRIwEAYDVQQHDAnljZfkuqzluIIxEjAQBgNVBAMMCXRlc3RTTTJDQTAeFw0yMjEwMjAxMTEzNDBaFw0yMzEwMjAxMTEzNDBaME0xCzAJBgNVBAYTAkNOMTAwLgYDVQQtDCcyMWQyMWNiZDRkZWU0ZTBmYTExYjJhZmRhYzk2MDAwZTIwMjIxMDcxDDAKBgNVBAMMA2xoeTBZMBMGByqGSM49AgEGCCqBHM9VAYItA0IABEapdO5TpFC8HU4vOtrmsnaAfEl2BQpON06RWknxtal06svRpJews3xGnaP75ukpMQxE9VxVtRcpCsDDaRxqQhGjgaswgagwCQYDVR0TBAIwADAdBgNVHQ4EFgQUhXnqr5tI0CT2zc9p/+dh32k/1VIwSwYDVR0lAQH/BEEwPwYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQcDBAYIKwYBBQUHAwgGCisGAQQBgjcKAwMGCWCGSAGG+EIEATAOBgNVHQ8BAf8EBAMCBsAwHwYDVR0jBBgwFoAUE3GRQ7iygyrxFixllDZ6SqWNJicwCgYIKoEcz1UBg3UDRwAwRAIgTha13q9hlIKk4qsX4t7aKiP4oPkflyHUOhMXocmPlH8CIHjj+wU2CYEasXDaTe436Eho/vLv4vT2jpnmMW1DO0gx");

        //加密证书(BASE64)
        request.setEncCert("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");

        //加密证书私钥key(BASE64)
        request.setPrivateKey("bs4PSVKe0c8SD4US/14/ZEPuHnG2h4u6z7nfUUsVQAs=");

        //私钥加密格式 0-未加密 1-Sm2Cipher 2-Sm4Cipher
        request.setEnc(0);

        //密钥主人ID
        request.setManagerId("123456");

        //密钥主人名称
        request.setManagerName("test");

        Set<String> set = new HashSet<>();
        set.add("BKH4KjNJRpHO3mL7tk9/+v0O+QJZJb0xlOxlODHICPF+s9DHESicyAVqQbpYZRS+2MTf1Pru+cYC2psQrxetxAo=");
        //密钥主人公钥列表
        request.setAuthPublicKeys(set);

        try {
            CertImportResponse response = pkiClient.execute(request);
            // 后续业务
            if (response.isSuccess()) {
                System.out.println("成功响应：" + response.getResult());
            } else {
                System.out.println("失败响应：" + response.getBody());
            }
        } catch (ApiException e) {
            e.printStackTrace();
        }