Skip to main content

post_star_order

Function post_star_order 

Source
pub async fn post_star_order(
    auth: EstAuth,
    label: LabelExtractor,
    __arg2: State<Arc<AppState>>,
    headers: HeaderMap,
    body: Bytes,
) -> Result<Response, KipukaError>
Expand description

POST /.well-known/est/star

Create a new STAR order. The client submits a PKCS#10 CSR (base64- encoded, same as /simpleenroll) together with optional STAR-specific headers:

HeaderTypeDefault
Star-Renewal-Intervalu64 s[star].default_renewal_interval_secs
Star-Lifetimeu32 d[star].max_lifetime_days

On success the server issues the first certificate, stores the order, and returns 201 Created with a Star-Order-ID header.

§Authentication

Requires EST authentication (mTLS or OTP).

§Request

HeaderValue
Content-Typeapplication/pkcs10
BodyBase64-encoded DER PKCS#10 CSR

§Response

HeaderValue
Status201 Created
Content-Typeapplication/pkcs7-mime; smime-type=certs-only
Star-Order-IDUUID of the created order