org.springframework.vault.core

Class VaultPkiTemplate

java.lang.Object

org.springframework.vault.core.VaultPkiTemplate

All Implemented Interfaces:

VaultPkiOperations

public class VaultPkiTemplate
extends Object
implements VaultPkiOperations

Default implementation of VaultPkiOperations.

Author:

Mark Paluch

Constructor Summary

Constructors

Constructor and Description
VaultPkiTemplate(VaultOperations vaultOperations, String path) Create a new VaultPkiTemplate given VaultPkiOperations and the mount path.

Method Summary

Modifier and Type	Method and Description
VaultCertificateResponse	issueCertificate(String roleName, VaultCertificateRequest certificateRequest) Requests a certificate bundle (private key and certificate) from Vault's PKI backend given a roleName and VaultCertificateRequest.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

VaultPkiTemplate

public VaultPkiTemplate(VaultOperations vaultOperations,
                        String path)

Create a new VaultPkiTemplate given VaultPkiOperations and the mount path.

Parameters:

vaultOperations - must not be null.

path - must not be empty or null.

Method Detail

issueCertificate

public VaultCertificateResponse issueCertificate(String roleName,
                                                 VaultCertificateRequest certificateRequest)
                                          throws VaultException

Description copied from interface: VaultPkiOperations

Requests a certificate bundle (private key and certificate) from Vault's PKI backend given a roleName and VaultCertificateRequest. The issuing CA certificate is returned as well, so that only the root CA need be in a client's trust store. Certificates use DER format and are base64 encoded.

Specified by:

issueCertificate in interface VaultPkiOperations

Parameters:

roleName - must not be empty or null.

certificateRequest - must not be null.

Returns:

the VaultCertificateResponse containing a CertificateBundle .

Throws:

VaultException

See Also:

POST /pki/issue/[role name]