Skip to main content

get_csrattrs

kipuka::routes::csrattrs

Function get_csrattrs 

Source 
pub async fn get_csrattrs(
    _auth: OptionalAuth,
    label: LabelExtractor,
    __arg2: State<Arc<AppState>>,
) -> Result<Response, KipukaError>
Expand description

GET /.well-known/est/csrattrs

Returns the CSR attributes that the server expects in enrollment requests for the resolved label.

§Response

HeaderValue
Status200 OK or 204 No Content
Content-Typeapplication/csrattrs

The body is a base64-encoded DER sequence of AttrOrOID values (RFC 7030 §4.5.2):

CsrAttrs ::= SEQUENCE SIZE (1..MAX) OF AttrOrOID
AttrOrOID ::= CHOICE {
    oid OBJECT IDENTIFIER,
    attribute Attribute
}

§Authentication

No authentication required per RFC 7030 §4.5.

§Errors

  • 404 Not Found — unknown EST label
  • 500 Internal Server Error — attribute encoding failure