ResourceDefinition

uris

/redfish/v1/Managers/manager_id/Certificates/certificate_id

properties

名称	类型	是否只读	说明
@odata.context	string	true	指定证书资源模型的OData描述信息
@odata.id	string	true	指定证书资源节点的访问路径
@odata.type	string	true	指定证书资源类型
Id	string	true	指定证书资源的ID
Name	string	true	指定证书资源的名称
CertificateString	string	false	证书内容
CertificateType	string	false	证书格式
Issuer	object	false	颁发者
Subject	object	false	使用者
ValidNotBefore	string	false	证书有效起始日期
ValidNotAfter	string	false	证书有效截止日期
SerialNumber	string	false	序列号
SignatureAlgorithm	string	false	签名算法
KeyUsage	array	false	密钥用法
PublicKeyLengthBits	number	false	公钥长度
Fingerprint	string	false	证书指纹
FingerprintHashAlgorithm	string	false	证书指纹算法
Oem.Public	自定义属性	false	-
IsImportCrl	boolean	false	是否配置证书吊销列表
CrlValidFrom	string	false	证书吊销列表有效起始日期
CrlValidTo	string	false	证书吊销列表有效截止日期
CertificateChainInfo	object	false	CA证书链信息
RootCert	object	false	证书链中的根证书信息，如果CA证书不为证书链，此部分不展示
IntermediateCert	object	false	证书链中的中间证书信息，如果CA证书链小于等于两级，此部分不展示
ServerCert	object	false	证书链中的末端生效证书信息，为此CA证书的主要信息，展示内容和外层信息一致
Actions	证书资源上支持的操作	false	-
#Certificate.DeleteCACertificateCRL	删除CA证书吊销列表操作	false	-
target	string	false	操作路径
@Redfish.ActionInfo	string	false	操作信息查询路径
code	string	false	指示消息注册表中特定消息ID的字符串
message	string	false	与消息注册表中的消息对应的易读的错误消息
MessageId	string	false	消息ID
RelatedProperties	array	false	消息相关属性
Message	string	false	详细信息
MessageArgs	array	false	信息参数
Severity	string	false	严重性Redfish支持的严重级别包括：OK、Warning、Critical
Resolution	string	false	解决建议

supported_methods

GET
POST

HTTP methods

GET

命令功能

查询指定 CA 证书资源信息

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/Certificates/certificate_id

请求头:

X-Auth-Token: auth_value

请求消息体: 无

参数说明

参数	参数说明	取值
device_ip	登录设备的IP地址	IPv4或IPv6地址
auth_value	请求消息的鉴权参数	可通过/redfish/v1/SessionService/Sessions创建会话时获得

使用指南

无

使用实例

请求样例： GET https://device_ip/redfish/v1/Managers/manager_id/Certificates/certificate_id

X-Auth-Token: auth_value 请求消息体：无

响应样例：

json

{
  "@odata.context": "/redfish/v1/$metadata#Certificate",
  "@odata.id": "/redfish/v1/Managers/1/Certificates/1",
  "@odata.type": "#Certificate.v1_3_0.Certificate",
  "Id": "ManagerCACertificate",
  "Name": "Manager CA Certificate",
  "CertificateString": "-----BEGIN CERTIFICATE----...----END CERTIFICATE-----\n",
  "CertificateType": "PEM",
  "Subject": {
    "OrganizationalUnit": "BMC ",
    "Organization": "HW",
    "City": "PX",
    "CommonName": "ca_2",
    "Country": "SC",
    "State": "CD"
  },
  "Issuer": {
    "OrganizationalUnit": "BMC ",
    "Organization": "HW",
    "City": "PX",
    "CommonName": "ca_2",
    "Country": "SC",
    "State": "CD"
  },
  "ValidNotBefore": "Nov 04 2022 UTC",
  "ValidNotAfter": "Nov 04 2032 UTC",
  "SerialNumber": "03:04",
  "SignatureAlgorithm": "sha512WithRSAEncryption",
  "KeyUsage": [
    "CRLSigning",
    "KeyCertSign"
  ],
  "PublicKeyLengthBits": 4096,
  "Fingerprint": "9e:9e:b1:70",
  "FingerprintHashAlgorithm": "SHA256",
  "Oem": {
    "Public": {
      "IsImportCrl": false,
      "CrlValidFrom": "",
      "CrlValidTo": "",
      "CertificateChainInfo": {
        "ServerCert": {
          "Subject": "CN=ca_2, OU=BMC, O=, L=PX, S=CD, C=SC",
          "Issuer": "CN=ca2, OU=BMC, O=, L=PX, S=CD, C=SC",
          "ValidNotBefore": "Nov 04 2022 UTC",
          "ValidNotAfter": "Nov 04 2032 UTC",
          "SerialNumber": "03 04",
          "SignatureAlgorithm": "SHA256",
          "KeyUsage": "CRL Sign, Certificate Sign",
          "PublicKeyLengthBits": 4096
        },
        "IntermediateCert": [
          {
            "Subject": "CN=ca2, OU=BMC, O=, L=PX, S=CD, C=SC",
            "Issuer": "CN=ca_bmc, OU=BMC, O=, L=PX, S=CD, C=SC",
            "ValidNotBefore": "Nov 04 2022 UTC",
            "ValidNotAfter": "Nov 04 2032 UTC",
            "SerialNumber": "02",
            "SignatureAlgorithm": "SHA256",
            "KeyUsage": "CRL Sign, Certificate Sign",
            "PublicKeyLengthBits": 4096
          }
        ],
        "RootCert": {
          "Subject": "CN=ca_bmc, OU=BMC, O=, L=PX, S=CD, C=SC",
          "Issuer": "CN=ca_bmc, OU=BMC, O=, L=PX, S=CD, C=SC",
          "ValidNotBefore": "Oct 01 2022 UTC",
          "ValidNotAfter": "Nov 04 2032 UTC",
          "SerialNumber": "01",
          "SignatureAlgorithm": "SHA256",
          "KeyUsage": "CRL Sign, Certificate Sign",
          "PublicKeyLengthBits": 4096
        }
      },
      "Actions": {
        "#Certificate.DeleteCACertificateCRL": {
          "target": "/redfish/v1/Managers/1/Certificates/1/Actions/Certificate.DeleteCACertificateCRL",
          "@Redfish.ActionInfo": "/redfish/v1/Managers/1/Certificates/1/DeleteCACertificateCRLActionInfo"
        }
      }
    }
  }
}

响应码：200

POST (ACTION)

DeleteCACertificateCRL

命令功能

删除 CA 证书的吊销列表

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/Certificates/certificate_id/Actions/Certificate.DeleteCACertificateCRL

请求头:

X-Auth-Token: auth_value
Content-Type: header_type

请求消息体:

json

{}

请求头参数说明

参见请求头参数说明

请求体参数说明

无

使用指南

无

使用实例

请求样例： POST https://device_ip/redfish/v1/Managers/manager_id/Certificates/certificate_id/Actions/Certificate.DeleteCACertificateCRL

X-Auth-Token: auth_value Content-Type: header_type 请求消息体：

json

{}

响应样例：

json

{
  "error": {
    "code": "Base.1.0.GeneralError",
    "message": "A general error has occurred. See ExtendedInfo for more information.",
    "@Message.ExtendedInfo": [
      {
        "@odata.type": "#Message.v1_0_0.Message",
        "MessageId": "Base.1.0.Success",
        "RelatedProperties": [],
        "Message": "Successfully Completed Request",
        "MessageArgs": [],
        "Severity": "OK",
        "Resolution": "None"
      }
    ]
  }
}

响应码：200

ResourceDefinition ​

uris ​

properties ​

supported_methods ​

HTTP methods ​

GET ​

POST (ACTION) ​

DeleteCACertificateCRL ​

ResourceDefinition

uris

properties

supported_methods

HTTP methods

GET

POST (ACTION)

DeleteCACertificateCRL