Help Center/
Cloud Certificate Manager/
Best Practices/
Best Practices for Private Certificate Management/
Best Practices of PCA Code Examples/
Example Code for Managing Private Certificates/
Revoking a Certificate
Updated on 2023-11-21 GMT+08:00
Revoking a Certificate
For details, see Parameters for Revoking a Private Certificate.
import com.huaweicloud.sdk.ccm.v1.CcmClient; import com.huaweicloud.sdk.ccm.v1.model.RevokeCertificateRequest; import com.huaweicloud.sdk.ccm.v1.model.RevokeCertificateRequestBody; import com.huaweicloud.sdk.ccm.v1.model.RevokeCertificateResponse; import com.huaweicloud.sdk.core.auth.GlobalCredentials; /** * Revoke a private certificate. */ public class RevokeCertificateExample { /** * Basic authentication information: * - ACCESS_KEY: access key of the Huawei Cloud account * - SECRET_ACCESS_KEY: secret access key of the Huawei Cloud account * - DOMAIN_ID: Huawei Cloud account ID. * - CCM_ENDPOINT: Endpoint address for accessing Huawei Cloud CCM (PCA is included in CCM). ......*Hard-coded or plaintext AK and SK are risky. For security, encrypt your AK and SK and store them in the configuration file or environment variables. * In this example, the AK and SK are stored in environment variables for identity authentication. Before running this example, configure environment variables HUAWEICLOUD_SDK_AK and HUAWEICLOUD_SDK_SK. */ private static final String ACCESS_KEY = System.getenv("HUAWEICLOUD_SDK_AK"); private static final String SECRET_ACCESS_KEY = System.getenv("HUAWEICLOUD_SDK_SK"); private static final String DOMAIN_ID = "<DomainID>"; private static final String CCM_ENDPOINT = "<CcmEndpoint>"; public static void main(String[] args) { // 1. Prepare the credentials for accessing Huawei Cloud. PCA is a global service. final GlobalCredentials auth = new GlobalCredentials() .withAk(ACCESS_KEY) .withSk(SECRET_ACCESS_KEY) .withDomainId(DOMAIN_ID); // 2. Initialize the SDK and transfer the credentials and endpoint address of CCM. final CcmClient ccmClient = CcmClient.newBuilder() .withCredential(auth) .withEndpoint(CCM_ENDPOINT).build(); // 3. Make request parameters. // (1) ID of the end-entity certificate you want to revoke. String certId = "5554a381-af92-4336-a943-811396c87616"; // (2) Enter the revocation reason (an enumerated value. For details, see the corresponding parameter in the API document). The corresponding revocation code will be written into the certificate revocation list. //Default value: UNSPECIFIED RevokeCertificateRequestBody requestBody = new RevokeCertificateRequestBody(); requestBody.setReason("UNSPECIFIED"); // 4. Construct a request body. RevokeCertificateRequest request = new RevokeCertificateRequest() .withCertificateId(certId) .withBody(requestBody); // 5. Start to send the request. RevokeCertificateResponse response; try { response = ccmClient.revokeCertificate(request); } catch (Exception e) { throw new RuntimeException(e.getMessage()); } // 6. Obtain the response message. After the revocation succeeds, no response is returned and the returned status code is 204. System.out.println(response.getHttpStatusCode()); } }
Parent topic: Example Code for Managing Private Certificates
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
The system is busy. Please try again later.
For any further questions, feel free to contact us through the chatbot.
Chatbot