HomeGuidesAPI Reference
API Reference
GuidesAPI ReferenceGitHubAirheads Developer Community
  1. Orchestrator REST APIs
  2. gmsHttpsUpload

Validate SSL Certificate and Private Key

post
http://127.0.0.1:8080/gms/httpsCertificate/validation

Validates an SSL certificate and private key before installation. Performs three-stage validation: (1) verifies certificate format and supported algorithms (SHA256/SHA384/SHA512 with RSA or ECDSA), (2) validates against the active cipher profile settings including minimum key sizes and allowed curves, (3) verifies the private key matches the certificate. Returns certificate metadata on success.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params

Certificate and private key data for validation. Both PEM and PFX/PKCS#12 formats are supported.

Request parameters for SSL certificate validation. Supports PEM and PFX/PKCS#12 formats with RSA or ECDSA keys.

string
required

Base64-encoded X.509 certificate with data URI prefix. For PEM format, must contain '-----BEGIN CERTIFICATE-----'. Supported algorithms: RSA, ECDSA with SHA256/SHA384/SHA512.

string

Base64-encoded private key with data URI prefix. Required for PEM certificates (not needed for PFX). Supports PKCS#1, PKCS#8, and EC private key formats.

string

Base64-encoded intermediate CA certificate chain for establishing trust to root CA. Optional for validation.

string

Password for PFX/PKCS#12 file decryption. Required when isPFX is true.

string

Passphrase for encrypted PEM private keys. Required when keyData contains 'ENCRYPTED' marker.

boolean
Defaults to false

Set to true for PFX/PKCS#12 certificate bundles. When true, certificateData contains the complete bundle and keyData can be empty.

boolean
Defaults to false

Set to true for CA certificates. When true, private key validation is skipped.

boolean
Defaults to false

Indicates if the request payload uses client-side encryption with the randomizer field.

string

Random string for client-side encryption. Required when isEncrypted is true.

Responses

401

Authentication required. Provide a valid JWT bearer token.

403

User lacks READ_WRITE permission for certificate management.

Updated about 11 hours ago

Did this page help you?
Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json

Updated about 11 hours ago

Did this page help you?