Bagikan melalui

CertificateClient class

Paket:
@azure/keyvault-certificates

Klien untuk berinteraksi dengan fungsionalitas sertifikat KeyVault

Konstruktor

CertificateClient(string, TokenCredential, CertificateClientOptions)

Membuat instans CertificateClient.

Properti

vaultUrl

URL dasar ke vault

Metode

backupCertificate(string, OperationOptions)

Meminta agar cadangan sertifikat yang ditentukan diunduh ke klien. Semua versi sertifikat akan diunduh. Operasi ini memerlukan izin sertifikat/cadangan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});
const backup = await client.backupCertificate("MyCertificate");

Menghasilkan cadangan sertifikat
beginCreateCertificate(string, CertificatePolicy, BeginCreateCertificateOptions)

Membuat sertifikat baru. Jika ini adalah versi pertama, sumber daya sertifikat dibuat. Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Catatan: Mengirim Self sebagai issuerName kebijakan sertifikat akan membuat sertifikat yang ditandatangani sendiri.

Operasi ini memerlukan izin sertifikat/buat.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const certificateName = "MyCertificateName";
const certificatePolicy = {
  issuerName: "Self",
  subject: "cn=MyCert",
};

const poller = await client.beginCreateCertificate(certificateName, certificatePolicy);

// You can use the pending certificate immediately:
const pendingCertificate = poller.getResult();

// Or you can wait until the certificate finishes being signed:
const keyVaultCertificate = await poller.pollUntilDone();
console.log(keyVaultCertificate);

Membuat sertifikat
beginDeleteCertificate(string, CertificatePollerOptions)

Operasi DELETE berlaku untuk sertifikat apa pun yang disimpan di Azure Key Vault. DELETE tidak dapat diterapkan ke versi individual sertifikat. Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Operasi ini memerlukan izin sertifikat/hapus.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const certificateName = "MyCertificate";

const poller = await client.beginDeleteCertificate(certificateName);

// You can use the deleted certificate immediately:
const deletedCertificate = poller.getResult();

// The certificate is being deleted. Only wait for it if you want to restore it or purge it.
await poller.pollUntilDone();

// You can also get the deleted certificate this way:
await client.getDeletedCertificate(certificateName);

// Deleted certificates can also be recovered or purged.

// recoverDeletedCertificate returns a poller, just like beginDeleteCertificate.
// const recoverPoller = await client.beginRecoverDeletedCertificate(certificateName);
// await recoverPoller.pollUntilDone();

// If a certificate is done and the Key Vault has soft-delete enabled, the certificate can be purged with:
await client.purgeDeletedCertificate(certificateName);

Menghapus sertifikat dari brankas kunci tertentu.
beginRecoverDeletedCertificate(string, CertificatePollerOptions)

Memulihkan sertifikat yang dihapus di vault yang ditentukan. Operasi ini hanya dapat dilakukan pada vault yang diaktifkan penghapusan sementara. Operasi ini Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Operasi ini memerlukan izin sertifikat/pemulihan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const deletePoller = await client.beginDeleteCertificate("MyCertificate");
await deletePoller.pollUntilDone();

const recoverPoller = await client.beginRecoverDeletedCertificate("MyCertificate");

// Waiting until it's done
const certificate = await recoverPoller.pollUntilDone();
console.log(certificate);

Memulihkan sertifikat yang dihapus
createIssuer(string, string, CreateIssuerOptions)

Operasi createIssuer menambahkan atau memperbarui penerbit sertifikat yang ditentukan. Operasi ini memerlukan izin sertifikat/setissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.createIssuer("IssuerName", "Test");

Mengatur penerbit sertifikat yang ditentukan.
deleteCertificateOperation(string, OperationOptions)

Menghapus operasi pembuatan untuk sertifikat tertentu yang sedang dalam proses dibuat. Sertifikat tidak lagi dibuat. Operasi ini memerlukan izin sertifikat/pembaruan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});
await client.deleteCertificateOperation("MyCertificate");

await client.getCertificateOperation("MyCertificate");

Menghapus operasi sertifikat
deleteContacts(OperationOptions)

Menghapus semua kontak sertifikat. Operasi ini memerlukan izin sertifikat/managecontacts.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.deleteContacts();

Menghapus semua kontak sertifikat
deleteIssuer(string, OperationOptions)

Operasi deleteIssuer menghapus pengeluar sertifikat yang ditentukan secara permanen dari vault. Operasi ini memerlukan izin sertifikat/manageissuers/deleteissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.deleteIssuer("IssuerName");

Menghapus penerbit sertifikat yang ditentukan.
getCertificate(string, OperationOptions)

Mendapatkan informasi terbaru yang tersedia dari sertifikat tertentu, termasuk kebijakan sertifikat. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const certificateName = "MyCertificate";

const result = await client.getCertificate(certificateName);
console.log(result.name);

Mengambil sertifikat dari nama sertifikat (termasuk kebijakan sertifikat)
getCertificateOperation(string, CertificatePollerOptions)

Mendapatkan operasi pembuatan yang terkait dengan sertifikat tertentu. Operasi ini memerlukan sertifikat/mendapatkan izin. Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const createPoller = await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});

const poller = await client.getCertificateOperation("MyCertificate");
const pendingCertificate = poller.getResult();

const certificateOperation = poller.getOperationState().certificateOperation;
console.log(certificateOperation);

Mendapatkan operasi poller sertifikat
getCertificatePolicy(string, OperationOptions)

Operasi getCertificatePolicy mengembalikan sumber daya kebijakan sertifikat yang ditentukan dalam brankas kunci yang ditentukan. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const policy = await client.getCertificatePolicy("MyCertificate");
console.log(policy);

Mendapatkan kebijakan sertifikat
getCertificateVersion(string, string, OperationOptions)

Mendapatkan informasi tentang sertifikat tertentu pada versi tertentu. Ini tidak akan mengembalikan kebijakan sertifikat. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const certificateName = "MyCertificateName";

const latestCertificate = await client.getCertificate(certificateName);
console.log(`Latest version of the certificate ${certificateName}: `, latestCertificate);
const specificCertificate = await client.getCertificateVersion(
  certificateName,
  latestCertificate.properties.version,
);
console.log(
  `The certificate ${certificateName} at the version ${latestCertificate.properties.version}: `,
  specificCertificate,
);

Mengambil sertifikat dari nama sertifikat dan versi tertentu
getContacts(OperationOptions)

Mengembalikan kumpulan sumber daya kontak sertifikat dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/managecontacts.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const contacts = await client.getContacts();
for (const contact of contacts) {
  console.log(contact);
}

Mengatur kontak sertifikat.
getDeletedCertificate(string, OperationOptions)

mengambil informasi sertifikat yang dihapus ditambah atributnya, seperti interval retensi, penghapusan permanen terjadwal, dan tingkat pemulihan penghapusan saat ini. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const deletedCertificate = await client.getDeletedCertificate("MyDeletedCertificate");
console.log("Deleted certificate:", deletedCertificate);

Mendapatkan sertifikat yang dihapus
getIssuer(string, OperationOptions)

Operasi getIssuer mengembalikan sumber daya penerbit sertifikat yang ditentukan dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/manageissuers/getissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const certificateIssuer = await client.getIssuer("IssuerName");
console.log(certificateIssuer);

Mendapatkan pengeluar sertifikat yang ditentukan.
importCertificate(string, Uint8Array, ImportCertificateOptions)

Mengimpor sertifikat yang valid yang sudah ada, yang berisi kunci privat, ke Azure Key Vault. Sertifikat yang akan diimpor dapat dalam format PFX atau PEM. Jika sertifikat dalam format PEM, file PEM harus berisi kunci serta sertifikat x509. Operasi ini memerlukan izin sertifikat/impor.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";
import { SecretClient } from "@azure/keyvault-secrets";
import { isNodeLike } from "@azure/core-util";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);
const secretClient = new SecretClient(url, credential);

const certificateSecret = await secretClient.getSecret("MyCertificate");
const base64EncodedCertificate = certificateSecret.value!;

const buffer = isNodeLike
  ? Buffer.from(base64EncodedCertificate, "base64")
  : Uint8Array.from(atob(base64EncodedCertificate), (c) => c.charCodeAt(0));
await client.importCertificate("MyCertificate", buffer);

Mengimpor sertifikat dari nilai rahasia sertifikat
listDeletedCertificates(ListDeletedCertificatesOptions)

Mengambil sertifikat di vault saat ini yang dalam keadaan dihapus dan siap untuk pemulihan atau pembersihan. Operasi ini mencakup informasi khusus penghapusan. Operasi ini memerlukan izin sertifikat/dapatkan/daftar. Operasi ini hanya dapat diaktifkan pada vault yang diaktifkan penghapusan sementara.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

for await (const deletedCertificate of client.listDeletedCertificates()) {
  console.log(deletedCertificate);
}

for await (const page of client.listDeletedCertificates().byPage()) {
  for (const deletedCertificate of page) {
    console.log(deletedCertificate);
  }
}

Mencantumkan sertifikat yang dihapus
listPropertiesOfCertificates(ListPropertiesOfCertificatesOptions)

Melakukan iterasi versi terbaru dari semua sertifikat di vault. Pengidentifikasi dan atribut sertifikat lengkap disediakan dalam respons. Tidak ada nilai yang dikembalikan untuk sertifikat. Operasi ini memerlukan izin sertifikat/daftar.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

// All in one call
for await (const certificateProperties of client.listPropertiesOfCertificates()) {
  console.log(certificateProperties);
}

// By pages
for await (const page of client.listPropertiesOfCertificates().byPage()) {
  for (const certificateProperties of page) {
    console.log(certificateProperties);
  }
}

Mencantumkan semua versi sertifikat yang ditentukan.
listPropertiesOfCertificateVersions(string, OperationOptions)

Mengembalikan versi sertifikat dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/daftar.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

for await (const certificateProperties of client.listPropertiesOfCertificateVersions(
  "MyCertificate",
)) {
  console.log(certificateProperties.version!);
}

Mencantumkan versi sertifikat.
listPropertiesOfIssuers(OperationOptions)

Mengembalikan sekumpulan sumber daya penerbit sertifikat dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/manageissuers/getissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.createIssuer("IssuerName", "Test");

// All in one call
for await (const issuerProperties of client.listPropertiesOfIssuers()) {
  console.log(issuerProperties);
}

// By pages
for await (const page of client.listPropertiesOfIssuers().byPage()) {
  for (const issuerProperties of page) {
    console.log(issuerProperties);
  }
}

Mencantumkan penerbit sertifikat.
mergeCertificate(string, Uint8Array[], OperationOptions)

Melakukan penggabungan sertifikat atau rantai sertifikat dengan pasangan kunci yang saat ini tersedia dalam layanan. Operasi ini memerlukan izin sertifikat/buat.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";
import { writeFileSync, readFileSync } from "node:fs";
import { execSync } from "node:child_process";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Unknown",
  subject: "cn=MyCert",
});
const poller = await client.getCertificateOperation("MyCertificate");
const { csr } = poller.getOperationState().certificateOperation!;
const base64Csr = Buffer.from(csr!).toString("base64");
const wrappedCsr = [
  "-----BEGIN CERTIFICATE REQUEST-----",
  base64Csr,
  "-----END CERTIFICATE REQUEST-----",
].join("\n");

writeFileSync("test.csr", wrappedCsr);

// Certificate available locally made using:
//   openssl genrsa -out ca.key 2048
//   openssl req -new -x509 -key ca.key -out ca.crt
// You can read more about how to create a fake certificate authority here: https://gist.github.com/Soarez/9688998

execSync("openssl x509 -req -in test.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out test.crt");
const base64Crt = readFileSync("test.crt").toString().split("\n").slice(1, -1).join("");

await client.mergeCertificate("MyCertificate", [Buffer.from(base64Crt)]);

Menggabungkan permintaan sertifikat yang ditandatangani ke dalam sertifikat yang tertunda
purgeDeletedCertificate(string, OperationOptions)

Melakukan penghapusan sertifikat yang ditentukan yang tidak dapat diubah, tanpa kemungkinan untuk pemulihan. Operasi tidak tersedia jika tingkat pemulihan tidak menentukan 'Dapat Dibersihkan'. Operasi ini memerlukan izin sertifikat/hapus menyeluruh.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const deletePoller = await client.beginDeleteCertificate("MyCertificate");
await deletePoller.pollUntilDone();

// Deleting a certificate takes time, make sure to wait before purging it
client.purgeDeletedCertificate("MyCertificate");

Mendapatkan sertifikat yang dihapus
restoreCertificateBackup(Uint8Array, OperationOptions)

Memulihkan sertifikat yang dicadangkan, dan semua versinya, ke vault. Operasi ini memerlukan izin sertifikat/pemulihan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});
const backup = await client.backupCertificate("MyCertificate");

const poller = await client.beginDeleteCertificate("MyCertificate");
await poller.pollUntilDone();

// Some time is required before we're able to restore the certificate
await client.restoreCertificateBackup(backup!);

Memulihkan sertifikat dari cadangan
setContacts(CertificateContact[], OperationOptions)

Mengatur kontak sertifikat untuk brankas kunci. Operasi ini memerlukan izin sertifikat/managecontacts.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.setContacts([
  {
    email: "b@b.com",
    name: "b",
    phone: "222222222222",
  },
]);

Mengatur kontak sertifikat.
updateCertificatePolicy(string, CertificatePolicy, OperationOptions)

Memperbarui kebijakan sertifikat untuk sertifikat yang ditentukan. Operasi ini memerlukan izin sertifikat/pembaruan. Mendapatkan kebijakan sertifikat
updateCertificateProperties(string, string, UpdateCertificatePropertiesOptions)

Menerapkan pembaruan yang ditentukan pada sertifikat yang diberikan; satu-satunya elemen yang diperbarui adalah atribut sertifikat. Operasi ini memerlukan izin sertifikat/pembaruan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

// You may pass an empty string for version which will update
// the latest version of the certificate
await client.updateCertificateProperties("MyCertificate", "", {
  tags: {
    customTag: "value",
  },
});

Memperbarui sertifikat
updateIssuer(string, UpdateIssuerOptions)

Operasi updateIssuer melakukan pembaruan pada entitas penerbit sertifikat yang ditentukan. Operasi ini memerlukan izin sertifikat/setissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.updateIssuer("IssuerName", {
  provider: "Provider2",
});

Memperbarui penerbit sertifikat yang ditentukan.

Detail Konstruktor

CertificateClient(string, TokenCredential, CertificateClientOptions)

Membuat instans CertificateClient.

new CertificateClient(vaultUrl: string, credential: TokenCredential, clientOptions?: CertificateClientOptions)

Parameter

vaultUrl

string

URL dasar ke vault. Anda harus memvalidasi bahwa URL ini mereferensikan sumber daya Key Vault yang valid. Lihat https://aka.ms/azsdk/blog/vault-uri untuk detailnya.

credential
TokenCredential

Objek yang mengimplementasikan antarmuka TokenCredential yang digunakan untuk mengautentikasi permintaan ke layanan. Gunakan paket @azure/identity untuk membuat kredensial yang sesuai dengan kebutuhan Anda.

clientOptions
CertificateClientOptions

Opsi alur yang digunakan untuk mengonfigurasi permintaan API Key Vault. Hilangkan parameter ini untuk menggunakan konfigurasi alur default.

Detail Properti

vaultUrl

URL dasar ke vault

vaultUrl: string

Nilai Properti

string

Detail Metode

backupCertificate(string, OperationOptions)

Meminta agar cadangan sertifikat yang ditentukan diunduh ke klien. Semua versi sertifikat akan diunduh. Operasi ini memerlukan izin sertifikat/cadangan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});
const backup = await client.backupCertificate("MyCertificate");

Menghasilkan cadangan sertifikat

function backupCertificate(certificateName: string, options?: OperationOptions): Promise<undefined | Uint8Array>

Parameter

certificateName

string

Nama sertifikat

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<undefined | Uint8Array>

beginCreateCertificate(string, CertificatePolicy, BeginCreateCertificateOptions)

Membuat sertifikat baru. Jika ini adalah versi pertama, sumber daya sertifikat dibuat. Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Catatan: Mengirim Self sebagai issuerName kebijakan sertifikat akan membuat sertifikat yang ditandatangani sendiri.

Operasi ini memerlukan izin sertifikat/buat.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const certificateName = "MyCertificateName";
const certificatePolicy = {
  issuerName: "Self",
  subject: "cn=MyCert",
};

const poller = await client.beginCreateCertificate(certificateName, certificatePolicy);

// You can use the pending certificate immediately:
const pendingCertificate = poller.getResult();

// Or you can wait until the certificate finishes being signed:
const keyVaultCertificate = await poller.pollUntilDone();
console.log(keyVaultCertificate);

Membuat sertifikat

function beginCreateCertificate(certificateName: string, policy: CertificatePolicy, options?: BeginCreateCertificateOptions): Promise<PollerLikeWithCancellation<CreateCertificateState, KeyVaultCertificateWithPolicy>>

Parameter

certificateName

string

Nama sertifikat

policy
CertificatePolicy
options
BeginCreateCertificateOptions

Parameter opsional

Mengembalikan

Promise<PollerLikeWithCancellation<CreateCertificateState, KeyVaultCertificateWithPolicy>>

beginDeleteCertificate(string, CertificatePollerOptions)

Operasi DELETE berlaku untuk sertifikat apa pun yang disimpan di Azure Key Vault. DELETE tidak dapat diterapkan ke versi individual sertifikat. Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Operasi ini memerlukan izin sertifikat/hapus.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const certificateName = "MyCertificate";

const poller = await client.beginDeleteCertificate(certificateName);

// You can use the deleted certificate immediately:
const deletedCertificate = poller.getResult();

// The certificate is being deleted. Only wait for it if you want to restore it or purge it.
await poller.pollUntilDone();

// You can also get the deleted certificate this way:
await client.getDeletedCertificate(certificateName);

// Deleted certificates can also be recovered or purged.

// recoverDeletedCertificate returns a poller, just like beginDeleteCertificate.
// const recoverPoller = await client.beginRecoverDeletedCertificate(certificateName);
// await recoverPoller.pollUntilDone();

// If a certificate is done and the Key Vault has soft-delete enabled, the certificate can be purged with:
await client.purgeDeletedCertificate(certificateName);

Menghapus sertifikat dari brankas kunci tertentu.

function beginDeleteCertificate(certificateName: string, options?: CertificatePollerOptions): Promise<PollerLike<DeleteCertificateState, DeletedCertificate>>

Parameter

certificateName

string

Nama sertifikat.

options
CertificatePollerOptions

Parameter opsional

Mengembalikan

Promise<PollerLike<DeleteCertificateState, DeletedCertificate>>

beginRecoverDeletedCertificate(string, CertificatePollerOptions)

Memulihkan sertifikat yang dihapus di vault yang ditentukan. Operasi ini hanya dapat dilakukan pada vault yang diaktifkan penghapusan sementara. Operasi ini Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Operasi ini memerlukan izin sertifikat/pemulihan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const deletePoller = await client.beginDeleteCertificate("MyCertificate");
await deletePoller.pollUntilDone();

const recoverPoller = await client.beginRecoverDeletedCertificate("MyCertificate");

// Waiting until it's done
const certificate = await recoverPoller.pollUntilDone();
console.log(certificate);

Memulihkan sertifikat yang dihapus

function beginRecoverDeletedCertificate(certificateName: string, options?: CertificatePollerOptions): Promise<PollerLike<RecoverDeletedCertificateState, KeyVaultCertificateWithPolicy>>

Parameter

certificateName

string

Nama sertifikat yang dihapus

options
CertificatePollerOptions

Parameter opsional

Mengembalikan

Promise<PollerLike<RecoverDeletedCertificateState, KeyVaultCertificateWithPolicy>>

createIssuer(string, string, CreateIssuerOptions)

Operasi createIssuer menambahkan atau memperbarui penerbit sertifikat yang ditentukan. Operasi ini memerlukan izin sertifikat/setissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.createIssuer("IssuerName", "Test");

Mengatur penerbit sertifikat yang ditentukan.

function createIssuer(issuerName: string, provider: string, options?: CreateIssuerOptions): Promise<CertificateIssuer>

Parameter

issuerName

string

Nama penerbit.

provider

string

Penyedia penerbit.

options
CreateIssuerOptions

Parameter opsional

Mengembalikan

Promise<CertificateIssuer>

deleteCertificateOperation(string, OperationOptions)

Menghapus operasi pembuatan untuk sertifikat tertentu yang sedang dalam proses dibuat. Sertifikat tidak lagi dibuat. Operasi ini memerlukan izin sertifikat/pembaruan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});
await client.deleteCertificateOperation("MyCertificate");

await client.getCertificateOperation("MyCertificate");

Menghapus operasi sertifikat

function deleteCertificateOperation(certificateName: string, options?: OperationOptions): Promise<CertificateOperation>

Parameter

certificateName

string

Nama sertifikat

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<CertificateOperation>

deleteContacts(OperationOptions)

Menghapus semua kontak sertifikat. Operasi ini memerlukan izin sertifikat/managecontacts.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.deleteContacts();

Menghapus semua kontak sertifikat

function deleteContacts(options?: OperationOptions): Promise<undefined | CertificateContact[]>

Parameter

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<undefined | CertificateContact[]>

deleteIssuer(string, OperationOptions)

Operasi deleteIssuer menghapus pengeluar sertifikat yang ditentukan secara permanen dari vault. Operasi ini memerlukan izin sertifikat/manageissuers/deleteissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.deleteIssuer("IssuerName");

Menghapus penerbit sertifikat yang ditentukan.

function deleteIssuer(issuerName: string, options?: OperationOptions): Promise<CertificateIssuer>

Parameter

issuerName

string

Nama penerbit.

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<CertificateIssuer>

getCertificate(string, OperationOptions)

Mendapatkan informasi terbaru yang tersedia dari sertifikat tertentu, termasuk kebijakan sertifikat. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const certificateName = "MyCertificate";

const result = await client.getCertificate(certificateName);
console.log(result.name);

Mengambil sertifikat dari nama sertifikat (termasuk kebijakan sertifikat)

function getCertificate(certificateName: string, options?: OperationOptions): Promise<KeyVaultCertificateWithPolicy>

Parameter

certificateName

string

Nama sertifikat

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<KeyVaultCertificateWithPolicy>

getCertificateOperation(string, CertificatePollerOptions)

Mendapatkan operasi pembuatan yang terkait dengan sertifikat tertentu. Operasi ini memerlukan sertifikat/mendapatkan izin. Fungsi ini mengembalikan poller Operasi Jangka Panjang yang memungkinkan Anda untuk menunggu tanpa batas waktu hingga sertifikat sepenuhnya dipulihkan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const createPoller = await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});

const poller = await client.getCertificateOperation("MyCertificate");
const pendingCertificate = poller.getResult();

const certificateOperation = poller.getOperationState().certificateOperation;
console.log(certificateOperation);

Mendapatkan operasi poller sertifikat

function getCertificateOperation(certificateName: string, options?: CertificatePollerOptions): Promise<PollerLikeWithCancellation<CertificateOperationState, KeyVaultCertificateWithPolicy>>

Parameter

certificateName

string

Nama sertifikat

options
CertificatePollerOptions

Parameter opsional

Mengembalikan

Promise<PollerLikeWithCancellation<CertificateOperationState, KeyVaultCertificateWithPolicy>>

getCertificatePolicy(string, OperationOptions)

Operasi getCertificatePolicy mengembalikan sumber daya kebijakan sertifikat yang ditentukan dalam brankas kunci yang ditentukan. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const policy = await client.getCertificatePolicy("MyCertificate");
console.log(policy);

Mendapatkan kebijakan sertifikat

function getCertificatePolicy(certificateName: string, options?: OperationOptions): Promise<CertificatePolicy>

Parameter

certificateName

string

Nama sertifikat

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<CertificatePolicy>

getCertificateVersion(string, string, OperationOptions)

Mendapatkan informasi tentang sertifikat tertentu pada versi tertentu. Ini tidak akan mengembalikan kebijakan sertifikat. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const certificateName = "MyCertificateName";

const latestCertificate = await client.getCertificate(certificateName);
console.log(`Latest version of the certificate ${certificateName}: `, latestCertificate);
const specificCertificate = await client.getCertificateVersion(
  certificateName,
  latestCertificate.properties.version,
);
console.log(
  `The certificate ${certificateName} at the version ${latestCertificate.properties.version}: `,
  specificCertificate,
);

Mengambil sertifikat dari nama sertifikat dan versi tertentu

function getCertificateVersion(certificateName: string, version: string, options?: OperationOptions): Promise<KeyVaultCertificate>

Parameter

certificateName

string

Nama sertifikat

version

string

Versi sertifikat tertentu

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<KeyVaultCertificate>

getContacts(OperationOptions)

Mengembalikan kumpulan sumber daya kontak sertifikat dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/managecontacts.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const contacts = await client.getContacts();
for (const contact of contacts) {
  console.log(contact);
}

Mengatur kontak sertifikat.

function getContacts(options?: OperationOptions): Promise<undefined | CertificateContact[]>

Parameter

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<undefined | CertificateContact[]>

getDeletedCertificate(string, OperationOptions)

mengambil informasi sertifikat yang dihapus ditambah atributnya, seperti interval retensi, penghapusan permanen terjadwal, dan tingkat pemulihan penghapusan saat ini. Operasi ini memerlukan sertifikat/mendapatkan izin.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const deletedCertificate = await client.getDeletedCertificate("MyDeletedCertificate");
console.log("Deleted certificate:", deletedCertificate);

Mendapatkan sertifikat yang dihapus

function getDeletedCertificate(certificateName: string, options?: OperationOptions): Promise<DeletedCertificate>

Parameter

certificateName

string

Nama sertifikat

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<DeletedCertificate>

getIssuer(string, OperationOptions)

Operasi getIssuer mengembalikan sumber daya penerbit sertifikat yang ditentukan dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/manageissuers/getissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

const certificateIssuer = await client.getIssuer("IssuerName");
console.log(certificateIssuer);

Mendapatkan pengeluar sertifikat yang ditentukan.

function getIssuer(issuerName: string, options?: OperationOptions): Promise<CertificateIssuer>

Parameter

issuerName

string

Nama penerbit.

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<CertificateIssuer>

importCertificate(string, Uint8Array, ImportCertificateOptions)

Mengimpor sertifikat yang valid yang sudah ada, yang berisi kunci privat, ke Azure Key Vault. Sertifikat yang akan diimpor dapat dalam format PFX atau PEM. Jika sertifikat dalam format PEM, file PEM harus berisi kunci serta sertifikat x509. Operasi ini memerlukan izin sertifikat/impor.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";
import { SecretClient } from "@azure/keyvault-secrets";
import { isNodeLike } from "@azure/core-util";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);
const secretClient = new SecretClient(url, credential);

const certificateSecret = await secretClient.getSecret("MyCertificate");
const base64EncodedCertificate = certificateSecret.value!;

const buffer = isNodeLike
  ? Buffer.from(base64EncodedCertificate, "base64")
  : Uint8Array.from(atob(base64EncodedCertificate), (c) => c.charCodeAt(0));
await client.importCertificate("MyCertificate", buffer);

Mengimpor sertifikat dari nilai rahasia sertifikat

function importCertificate(certificateName: string, certificateBytes: Uint8Array, options?: ImportCertificateOptions): Promise<KeyVaultCertificateWithPolicy>

Parameter

certificateName

string

Nama sertifikat

certificateBytes

Uint8Array

Nilai PFX atau ASCII PEM yang diformat sertifikat yang berisi sertifikat X.509 dan kunci privat

options
ImportCertificateOptions

Parameter opsional

Mengembalikan

Promise<KeyVaultCertificateWithPolicy>

listDeletedCertificates(ListDeletedCertificatesOptions)

Mengambil sertifikat di vault saat ini yang dalam keadaan dihapus dan siap untuk pemulihan atau pembersihan. Operasi ini mencakup informasi khusus penghapusan. Operasi ini memerlukan izin sertifikat/dapatkan/daftar. Operasi ini hanya dapat diaktifkan pada vault yang diaktifkan penghapusan sementara.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

for await (const deletedCertificate of client.listDeletedCertificates()) {
  console.log(deletedCertificate);
}

for await (const page of client.listDeletedCertificates().byPage()) {
  for (const deletedCertificate of page) {
    console.log(deletedCertificate);
  }
}

Mencantumkan sertifikat yang dihapus

function listDeletedCertificates(options?: ListDeletedCertificatesOptions): PagedAsyncIterableIterator<DeletedCertificate, DeletedCertificate[], PageSettings>

Parameter

options
ListDeletedCertificatesOptions

Parameter opsional

Mengembalikan

PagedAsyncIterableIterator<DeletedCertificate, DeletedCertificate[], PageSettings>

listPropertiesOfCertificates(ListPropertiesOfCertificatesOptions)

Melakukan iterasi versi terbaru dari semua sertifikat di vault. Pengidentifikasi dan atribut sertifikat lengkap disediakan dalam respons. Tidak ada nilai yang dikembalikan untuk sertifikat. Operasi ini memerlukan izin sertifikat/daftar.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

// All in one call
for await (const certificateProperties of client.listPropertiesOfCertificates()) {
  console.log(certificateProperties);
}

// By pages
for await (const page of client.listPropertiesOfCertificates().byPage()) {
  for (const certificateProperties of page) {
    console.log(certificateProperties);
  }
}

Mencantumkan semua versi sertifikat yang ditentukan.

function listPropertiesOfCertificates(options?: ListPropertiesOfCertificatesOptions): PagedAsyncIterableIterator<CertificateProperties, CertificateProperties[], PageSettings>

Parameter

options
ListPropertiesOfCertificatesOptions

Parameter opsional

Mengembalikan

PagedAsyncIterableIterator<CertificateProperties, CertificateProperties[], PageSettings>

listPropertiesOfCertificateVersions(string, OperationOptions)

Mengembalikan versi sertifikat dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/daftar.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

for await (const certificateProperties of client.listPropertiesOfCertificateVersions(
  "MyCertificate",
)) {
  console.log(certificateProperties.version!);
}

Mencantumkan versi sertifikat.

function listPropertiesOfCertificateVersions(certificateName: string, options?: OperationOptions): PagedAsyncIterableIterator<CertificateProperties, CertificateProperties[], PageSettings>

Parameter

certificateName

string

Nama sertifikat.

options
OperationOptions

Parameter opsional

Mengembalikan

PagedAsyncIterableIterator<CertificateProperties, CertificateProperties[], PageSettings>

listPropertiesOfIssuers(OperationOptions)

Mengembalikan sekumpulan sumber daya penerbit sertifikat dalam brankas kunci yang ditentukan. Operasi ini memerlukan izin sertifikat/manageissuers/getissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.createIssuer("IssuerName", "Test");

// All in one call
for await (const issuerProperties of client.listPropertiesOfIssuers()) {
  console.log(issuerProperties);
}

// By pages
for await (const page of client.listPropertiesOfIssuers().byPage()) {
  for (const issuerProperties of page) {
    console.log(issuerProperties);
  }
}

Mencantumkan penerbit sertifikat.

function listPropertiesOfIssuers(options?: OperationOptions): PagedAsyncIterableIterator<IssuerProperties, IssuerProperties[], PageSettings>

Parameter

options
OperationOptions

Parameter opsional

Mengembalikan

PagedAsyncIterableIterator<IssuerProperties, IssuerProperties[], PageSettings>

mergeCertificate(string, Uint8Array[], OperationOptions)

Melakukan penggabungan sertifikat atau rantai sertifikat dengan pasangan kunci yang saat ini tersedia dalam layanan. Operasi ini memerlukan izin sertifikat/buat.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";
import { writeFileSync, readFileSync } from "node:fs";
import { execSync } from "node:child_process";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Unknown",
  subject: "cn=MyCert",
});
const poller = await client.getCertificateOperation("MyCertificate");
const { csr } = poller.getOperationState().certificateOperation!;
const base64Csr = Buffer.from(csr!).toString("base64");
const wrappedCsr = [
  "-----BEGIN CERTIFICATE REQUEST-----",
  base64Csr,
  "-----END CERTIFICATE REQUEST-----",
].join("\n");

writeFileSync("test.csr", wrappedCsr);

// Certificate available locally made using:
//   openssl genrsa -out ca.key 2048
//   openssl req -new -x509 -key ca.key -out ca.crt
// You can read more about how to create a fake certificate authority here: https://gist.github.com/Soarez/9688998

execSync("openssl x509 -req -in test.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out test.crt");
const base64Crt = readFileSync("test.crt").toString().split("\n").slice(1, -1).join("");

await client.mergeCertificate("MyCertificate", [Buffer.from(base64Crt)]);

Menggabungkan permintaan sertifikat yang ditandatangani ke dalam sertifikat yang tertunda

function mergeCertificate(certificateName: string, x509Certificates: Uint8Array[], options?: OperationOptions): Promise<KeyVaultCertificateWithPolicy>

Parameter

certificateName

string

Nama sertifikat

x509Certificates

Uint8Array[]

Sertifikat yang akan digabungkan

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<KeyVaultCertificateWithPolicy>

purgeDeletedCertificate(string, OperationOptions)

Melakukan penghapusan sertifikat yang ditentukan yang tidak dapat diubah, tanpa kemungkinan untuk pemulihan. Operasi tidak tersedia jika tingkat pemulihan tidak menentukan 'Dapat Dibersihkan'. Operasi ini memerlukan izin sertifikat/hapus menyeluruh.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

const deletePoller = await client.beginDeleteCertificate("MyCertificate");
await deletePoller.pollUntilDone();

// Deleting a certificate takes time, make sure to wait before purging it
client.purgeDeletedCertificate("MyCertificate");

Mendapatkan sertifikat yang dihapus

function purgeDeletedCertificate(certificateName: string, options?: OperationOptions): Promise<null>

Parameter

certificateName

string

Nama sertifikat yang dihapus untuk dihapus menyeluruh

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<null>

restoreCertificateBackup(Uint8Array, OperationOptions)

Memulihkan sertifikat yang dicadangkan, dan semua versinya, ke vault. Operasi ini memerlukan izin sertifikat/pemulihan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

await client.beginCreateCertificate("MyCertificate", {
  issuerName: "Self",
  subject: "cn=MyCert",
});
const backup = await client.backupCertificate("MyCertificate");

const poller = await client.beginDeleteCertificate("MyCertificate");
await poller.pollUntilDone();

// Some time is required before we're able to restore the certificate
await client.restoreCertificateBackup(backup!);

Memulihkan sertifikat dari cadangan

function restoreCertificateBackup(backup: Uint8Array, options?: OperationOptions): Promise<KeyVaultCertificateWithPolicy>

Parameter

backup

Uint8Array

Sertifikat cadangan yang akan dipulihkan

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<KeyVaultCertificateWithPolicy>

setContacts(CertificateContact[], OperationOptions)

Mengatur kontak sertifikat untuk brankas kunci. Operasi ini memerlukan izin sertifikat/managecontacts.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.setContacts([
  {
    email: "b@b.com",
    name: "b",
    phone: "222222222222",
  },
]);

Mengatur kontak sertifikat.

function setContacts(contacts: CertificateContact[], options?: OperationOptions): Promise<undefined | CertificateContact[]>

Parameter

contacts

CertificateContact[]

Kontak yang akan digunakan

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<undefined | CertificateContact[]>

updateCertificatePolicy(string, CertificatePolicy, OperationOptions)

Memperbarui kebijakan sertifikat untuk sertifikat yang ditentukan. Operasi ini memerlukan izin sertifikat/pembaruan. Mendapatkan kebijakan sertifikat

function updateCertificatePolicy(certificateName: string, policy: CertificatePolicy, options?: OperationOptions): Promise<CertificatePolicy>

Parameter

certificateName

string

Nama sertifikat

policy
CertificatePolicy

Kebijakan sertifikat

options
OperationOptions

Parameter opsional

Mengembalikan

Promise<CertificatePolicy>

updateCertificateProperties(string, string, UpdateCertificatePropertiesOptions)

Menerapkan pembaruan yang ditentukan pada sertifikat yang diberikan; satu-satunya elemen yang diperbarui adalah atribut sertifikat. Operasi ini memerlukan izin sertifikat/pembaruan.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const url = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(url, credential);

// You may pass an empty string for version which will update
// the latest version of the certificate
await client.updateCertificateProperties("MyCertificate", "", {
  tags: {
    customTag: "value",
  },
});

Memperbarui sertifikat

function updateCertificateProperties(certificateName: string, version: string, options?: UpdateCertificatePropertiesOptions): Promise<KeyVaultCertificate>

Parameter

certificateName

string

Nama sertifikat

version

string

Versi sertifikat yang akan diperbarui (string kosong akan memperbarui versi terbaru)

options
UpdateCertificateOptions

Opsi, termasuk apa yang harus diperbarui

Mengembalikan

Promise<KeyVaultCertificate>

updateIssuer(string, UpdateIssuerOptions)

Operasi updateIssuer melakukan pembaruan pada entitas penerbit sertifikat yang ditentukan. Operasi ini memerlukan izin sertifikat/setissuers.

Contoh penggunaan:

import { DefaultAzureCredential } from "@azure/identity";
import { CertificateClient } from "@azure/keyvault-certificates";

const credential = new DefaultAzureCredential();

const vaultName = "<YOUR KEYVAULT NAME>";
const keyVaultUrl = `https://${vaultName}.vault.azure.net`;

const client = new CertificateClient(keyVaultUrl, credential);

await client.updateIssuer("IssuerName", {
  provider: "Provider2",
});

Memperbarui penerbit sertifikat yang ditentukan.

function updateIssuer(issuerName: string, options?: UpdateIssuerOptions): Promise<CertificateIssuer>

Parameter

issuerName

string

Nama penerbit.

options
UpdateIssuerOptions

Parameter opsional

Mengembalikan

Promise<CertificateIssuer>