POST
/
api
/
v1
/
ssh
/
certificate-templates
curl --request POST \
  --url https://us.infisical.com/api/v1/ssh/certificate-templates \
  --header 'Content-Type: application/json' \
  --data '{
  "sshCaId": "<string>",
  "name": "<string>",
  "ttl": "1h",
  "maxTTL": "30d",
  "allowedUsers": [
    "<string>"
  ],
  "allowedHosts": [
    "<string>"
  ],
  "allowUserCertificates": true,
  "allowHostCertificates": true,
  "allowCustomKeyIds": true
}'
{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "sshCaId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "status": "<string>",
  "name": "<string>",
  "ttl": "<string>",
  "maxTTL": "<string>",
  "allowedUsers": [
    "<string>"
  ],
  "allowedHosts": [
    "<string>"
  ],
  "allowCustomKeyIds": true,
  "allowUserCertificates": true,
  "allowHostCertificates": true
}

Body

application/json
​
sshCaId
string
required

The ID of the SSH CA to associate the certificate template with.

​
name
string
required

The name of the certificate template.

Required string length: 1 - 36
​
allowedUsers
string[]
required

The list of allowed users for certificates issued under this template.

​
allowedHosts
string[]
required

The list of allowed hosts for certificates issued under this template.

​
allowUserCertificates
boolean
required

Whether or not to allow user certificates to be issued under this template.

​
allowHostCertificates
boolean
required

Whether or not to allow host certificates to be issued under this template.

​
allowCustomKeyIds
boolean
required

Whether or not to allow custom key IDs for certificates issued under this template.

​
ttl
string
default:1h

The default time to live for issued certificates such as 1m, 1h, 1d, 1y, ...

​
maxTTL
string
default:30d

The maximum time to live for issued certificates such as 1m, 1h, 1d, 1y, ...

Response

200
application/json
Default Response
​
id
string
required
​
sshCaId
string
required
​
status
string
required
​
name
string
required
​
ttl
string
required
​
maxTTL
string
required
​
allowedUsers
string[]
required
​
allowedHosts
string[]
required
​
allowCustomKeyIds
boolean
required
​
allowUserCertificates
boolean
required
​
allowHostCertificates
boolean
required

Was this page helpful?

Suggest editsRaise issue