Manually renew an AS certificate chain
POST/cppki/certificates/renew
✨Added in v0.24
Manually renew a SCION CPPKI AS certificate chain with the regular renewal mechanism. By default, the distinguished name of the subject in the predecessor certificate chain is used. A different distinguished name can be requested by setting the subject in the request body. By default the issuers are taken from the appliance configuration, specific issuers can be configured in the request body. If they are set, certificate renewal is attempted with each issuer in order until success.
Note that certificate renewal requires at least one valid certificate chain to be present on the appliance.
Request
Responses
- 200
- 400
- 500
success
bad request
internal error