Certificate Generator API
Bases: object
Base Cert Generator Interface
A Certificate Generator is responsible for generating private keys, generating CSRs, and signing TLS certificates.
Generates a private key and certificate pair
cn – Common name to use for the Certificate
validity – Validity period for the Certificate
bit_length – Private key bit length
passphrase – Passphrase to use for encrypting the private key
octavia.certificates.common.Cert representation of the certificate data
Exception – If generation fails
Generates a signed certificate from the provided CSR
This call is designed to block until a signed certificate can be returned.
csr – A Certificate Signing Request
validity – Valid for <validity> seconds from the current time
PEM Encoded Signed certificate
Exception – If certificate signing fails
Bases: CertGenerator
Cert Generator Interface that signs certs locally.
Generates a private key and certificate pair
cn – Common name to use for the Certificate
validity – Validity period for the Certificate
bit_length – Private key bit length
passphrase – Passphrase to use for encrypting the private key
octavia.certificates.common.Cert representation of the certificate data
Exception – If generation fails
Signs a certificate using our private CA based on the specified CSR
The signed certificate will be valid from now until <validity> seconds from now.
csr – A Certificate Signing Request
validity – Valid for <validity> seconds from the current time
ca_cert – Signing Certificate (default: config)
ca_key – Signing Certificate Key (default: config)
ca_key_pass – Signing Certificate Key Pass (default: config)
ca_digest – Digest method to use for signing (default: config)
Signed certificate
Exception – if certificate signing fails
Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.