Skip to main content

Create trust authority

POST 
/v2/config/digital-wallet/openid/trust-authority

Creates a trust authority for the organisation. A trust authority is a trust list or a set of CA certificates that the service uses, in addition to the built-in trust lists, to validate issuers and verifiers in OID4VCI and OpenID4VP flows. type and value are required.

Request​

Body

required

The trust list to add to the organisation.

    type stringrequired

    Possible values: [ETSI_TL, ETSI_TL_JSON, X509_CA]

    Type of the trust authority: ETSI_TL (an ETSI TS 119 612 trusted list in XML), ETSI_TL_JSON (an ETSI TS 119 602 list of trusted entities in JSON) or X509_CA (CA certificates in PEM). The service changes the value to upper case.

    value stringrequired

    Possible values: non-empty and <= 65536 characters

    For ETSI_TL and ETSI_TL_JSON, the HTTP or HTTPS URL of the list. For X509_CA, PEM text with 1 to 10 CA certificates (basicConstraints cA=TRUE, not expired) and, optionally, up to 10 CRLs that these CAs signed. A private key is refused. At most 65536 characters.

    name string

    Possible values: <= 255 characters

    Name of the trust authority. The service shows this name in the dashboard. This field is optional, and the service stores an empty string when you leave it out.

Responses​

The service created the trust authority.

Response Headers
    Schema
      trustAuthority objectrequired

      The trust authority that the service created.

      id stringrequired

      Unique identifier (UUID) of the trust authority.

      type stringrequired

      Possible values: [ETSI_TL, ETSI_TL_JSON, X509_CA]

      Type of the trust authority: ETSI_TL (an ETSI TS 119 612 trusted list in XML), ETSI_TL_JSON (an ETSI TS 119 602 list of trusted entities in JSON) or X509_CA (CA certificates in PEM). The service changes the value to upper case.

      value stringrequired

      For ETSI_TL and ETSI_TL_JSON, the URL of the list. For X509_CA, the PEM text of the CA certificates and CRLs, in a normalised form.

      name stringrequired

      Name of the trust authority. The value is an empty string when the create or update request gave no name.

      disabled booleanrequired

      When true, this trust authority is disabled and not used for credential or verifier trust validation.

      createdAt numberrequired

      Unix timestamp (in seconds) when this trust authority was registered.

      updatedAt numberrequired

      Unix timestamp (in seconds) when this trust authority was last modified.

    Loading...
    Last updated on