Trust store that contains trust anchors and optional intermediate CAs used in PKI to build a trust chain(trust hierarchy) and verify a client's identity.
JSON representation |
---|
{ "trustAnchors": [ { object ( |
Fields | |
---|---|
trustAnchors[] |
Required. List of trust anchors to be used while performing validation against a given TrustStore. The incoming end entity's certificate must be in the trust chain of one of the trust anchors here. |
intermediateCas[] |
Optional. Set of intermediate CA certificates used for building the trust chain to the trust anchor. Important: Intermediate CAs are only supported for X.509 federation. |
TrustAnchor
Represents a root of trust.
JSON representation |
---|
{ // Union field |
Fields | |
---|---|
Union field
|
|
pemCertificate |
PEM certificate of the PKI used for validation. Must only contain one ca certificate(either root or intermediate cert). |
IntermediateCA
Intermediate CA certificates used for building the trust chain to trust anchor
JSON representation |
---|
{ // Union field |
Fields | |
---|---|
Union field
|
|
pemCertificate |
PEM certificate of the PKI used for validation. Must only contain one ca certificate. |