Venafi api - Revision history

Busk at 21:13, 17 April 2024

2024-04-17T21:13:34Z

Busk at 17:18, 8 April 2023

2023-04-08T17:18:10Z

Busk at 16:11, 8 April 2023

2023-04-08T16:11:14Z

Busk at 18:08, 7 April 2023

2023-04-07T18:08:30Z

Busk at 17:37, 7 April 2023

2023-04-07T17:37:27Z

Busk: Created page with "Platform->API->Integrations # Get Cert .env ``` set -a API_HOST=venafi.example.com USERNAME=foo PASSWORD=bar CLIENT_ID=apiIntergrationName SCOPE="certificate:manage" ``` `..."

2023-04-07T17:28:20Z

Created page with "Platform->API->Integrations # Get Cert .env ``` set -a API_HOST=venafi.example.com USERNAME=foo PASSWORD=bar CLIENT_ID=apiIntergrationName SCOPE="certificate:manage" ``` `..."

New page

Platform->API->Integrations

# Get Cert

.env
```
set -a
API_HOST=venafi.example.com
USERNAME=foo
PASSWORD=bar
CLIENT_ID=apiIntergrationName
SCOPE="certificate:manage"

```

```
. .env
```

Get cert example via path
```
#!/bin/bash
set -eu
if [ "$#" -ne 1 ]; then
echo "Usage: $0 <cert path>"
echo "Example: $0 \"MyFolder\Subfolder\mycert1\""
exit
fi
cert_path=$1

shopt -s expand_aliases
alias scurl="curl -s -b cookies.txt -c cookies.txt -H 'Content-type: application/json' -H 'Accept: application/json'"

json=$(cat <<-EOF
{
"client_id":"$CLIENT_ID",
"username":"${USERNAME}",
"password":"${PASSWORD}",
"scope":"${SCOPE}"
}
EOF
)

token=$(scurl -X POST https://$API_HOST/vedauth/authorize/oauth -d "${json}" | jq -r .access_token)

url="https://$API_HOST/vedsdk/Certificates/Retrieve"

cert_path=$(echo $cert_path | sed 's/\\/\\\\/g')
cert_prefix="\VED\Policy\Certificates\\"
cert_prefix=$(echo $cert_prefix | sed 's/\\/\\\\/g')
cert_dn="${cert_prefix}${cert_path}"

json=$(cat <<-EOF
{
"CertificateDN":"${cert_dn}",
"Format":"Base64",
"IncludeChain":"true",
"RootFirstOrder":"true"
}
EOF
)

rsp=$(scurl -H "Authorization:Bearer ${token}" -d "$json" "$url")
# echo "$rsp"

echo "$rsp" | jq -r .CertificateData | base64 -d
```

← Older revision		Revision as of 21:13, 17 April 2024
Line 127:		Line 127:

	## Get Cert		## Get Cert
		+
		+	Platform -> API -> Integrations and add one
		+	```
		+	{
		+	"username": "<your_name>",
		+	"password": "<your_password>",
		+	"client_id": "CustomAdmin",
		+	"scope": "certificate:manage;configuration:manage"
		+	}
		+	```

	.env		.env

← Older revision		Revision as of 18:08, 7 April 2023
Line 1:		Line 1:
		+	https://docs.venafi.com/Docs/current/TopNav/Content/SDK/WebSDK/r-SDK-GET-Certificates.php
		+
		+	https://docs.venafi.com/Docs/current/TopNav/Content/SDK/WebSDK/r-SDK-POST-Config-dntoguid.php
		+
		+	https://docs.venafi.com/Docs/current/TopNav/Content/SDK/AuthSDK/t-SDKa-Setup-OAuth.php
		+
		+	https://docs.venafi.com/Docs/21.2SDK/TopNav/Content/API-ApplicationIntegration/t-APIAppIntegrations-creatingNew-Aperture.php
		+
	Platform->API->Integrations		Platform->API->Integrations

@@ Line 166: / Line 166: @@
 EOF
+)
 rsp=$(scurl -X POST https://$API_HOST/vedauth/authorize/oauth -d "${json}")
 token=$(echo "$rsp" | jq -r .access_token)
-url="https://$API_HOST/vedsdk/Certificates/Retrieve"
+get_crt_via_guid(){
-    cert_path=$(echo $cert_path | sed 's/\\/\\\\/g')
+search_crt(){
-    cert_prefix="\VED\Policy\Certificates\\"
+  # GET https://test.venafi.example/vedsdk/certificates/?parentdnrecursive=%5CVED%5CPolicy&limit=2&offset=0
-    cert_prefix=$(echo $cert_prefix | sed 's/\\/\\\\/g')
+  # Authorization:Bearer 4MyGeneratedBearerTknz==
-    cert_dn="${cert_prefix}${cert_path}"
+  url="https://${API_HOST}/vedsdk/certificates/?parentdnrecursive=%5CVED%5CPolicy&limit=2&offset=0"
 json=$(cat <<-EOF
+get_crt_via_dn(){
-    "CertificateDN":"${cert_dn}",
+  url="https://$API_HOST/vedsdk/Certificates/Retrieve"
-    "Format":"Base64",
-    "IncludeChain":"true",
+  # folder is cert path in all properties
-    "RootFirstOrder":"true"
+  cert_path=$(echo $cert_path | sed 's/\\/\\\\/g')
+  cert_prefix="\VED\Policy\Certificates\\"
 EOF
+)
-rsp=$(scurl -H "Authorization:Bearer ${token}" -d "$json" "$url")
+  rsp=$(scurl -H "Authorization:Bearer ${token}" -d "$json" "$url")
-echo "$rsp" | jq -r .CertificateData | base64 -d
+get_crt_via_dn
 ```

@@ Line 9: / Line 9: @@
 Platform->API->Integrations
-# Get Cert
+# Python
 .env

@@ Line 30: / Line 30: @@
 shopt -s expand_aliases
-alias scurl="curl -s -b cookies.txt -c cookies.txt -H 'Content-type: application/json' -H 'Accept: application/json'"
+alias scurl="curl -sS -b cookies.txt -c cookies.txt -H 'Content-type: application/json' -H 'Accept: application/json'"
 json=$(cat <<-EOF
@@ Line 42: / Line 42: @@
+)
-token=$(scurl -X POST https://$API_HOST/vedauth/authorize/oauth -d "${json}" | jq -r .access_token)
+rsp=$(scurl -X POST https://$API_HOST/vedauth/authorize/oauth -d "${json}")
 url="https://$API_HOST/vedsdk/Certificates/Retrieve"
@@ Line 62: / Line 63: @@
 rsp=$(scurl -H "Authorization:Bearer ${token}" -d "$json" "$url")
 echo "$rsp" | jq -r .CertificateData | base64 -d
 ```