cloudflare
Version:
The official TypeScript library for the Cloudflare API
378 lines • 13.4 kB
TypeScript
import { APIResource } from "../../../core/resource.js";
import * as Shared from "../../shared.js";
import * as CustomHostnamesAPI from "../custom-hostnames.js";
import { APIPromise } from "../../../core/api-promise.js";
import { RequestOptions } from "../../../internal/request-options.js";
export declare class BaseCertificates extends APIResource {
static readonly _key: readonly ['customHostnames', 'certificatePack', 'certificates'];
/**
* Replace a single custom certificate within a certificate pack that contains two
* bundled certificates. The replacement must adhere to the following constraints.
* You can only replace an RSA certificate with another RSA certificate or an ECDSA
* certificate with another ECDSA certificate.
*
* @example
* ```ts
* const certificate =
* await client.customHostnames.certificatePack.certificates.update(
* '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
* {
* zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
* custom_hostname_id:
* '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
* certificate_pack_id:
* '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
* custom_certificate:
* '-----BEGIN CERTIFICATE-----\nMIIDdjCCAl6gAwIBAgIJAPnMg0Fs+/B0MA0GCSqGSIb3DQEBCwUAMFsx...\n-----END CERTIFICATE-----\n',
* custom_key:
* '-----BEGIN PRIVATE KEY-----\nMIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQC/SCB5...\n-----END PRIVATE KEY-----\n',
* },
* );
* ```
*/
update(certificateID: string, params: CertificateUpdateParams, options?: RequestOptions): APIPromise<CertificateUpdateResponse>;
/**
* Delete a single custom certificate from a certificate pack that contains two
* bundled certificates. Deletion is subject to the following constraints. You
* cannot delete a certificate if it is the only remaining certificate in the pack.
* At least one certificate must remain in the pack.
*
* @example
* ```ts
* const certificate =
* await client.customHostnames.certificatePack.certificates.delete(
* '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
* {
* zone_id: '023e105f4ecef8ad9ca31a8372d0c353',
* custom_hostname_id:
* '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
* certificate_pack_id:
* '0d89c70d-ad9f-4843-b99f-6cc0252067e9',
* },
* );
* ```
*/
delete(certificateID: string, params: CertificateDeleteParams, options?: RequestOptions): APIPromise<CertificateDeleteResponse>;
}
export declare class Certificates extends BaseCertificates {
}
export interface CertificateUpdateResponse {
/**
* Custom hostname identifier tag.
*/
id: string;
/**
* The custom hostname that will point to your hostname via CNAME.
*/
hostname: string;
/**
* This is the time the hostname was created.
*/
created_at?: string;
/**
* Unique key/value metadata for this hostname. These are per-hostname (customer)
* settings.
*/
custom_metadata?: {
[]: string;
};
/**
* a valid hostname that’s been added to your DNS zone as an A, AAAA, or CNAME
* record.
*/
custom_origin_server?: string;
/**
* A hostname that will be sent to your custom origin server as SNI for TLS
* handshake. This can be a valid subdomain of the zone or custom origin server
* name or the string ':request_host_header:' which will cause the host header in
* the request to be used as SNI. Not configurable with default/fallback origin
* server.
*/
custom_origin_sni?: string;
/**
* This is a record which can be placed to activate a hostname.
*/
ownership_verification?: CertificateUpdateResponse.OwnershipVerification;
/**
* This presents the token to be served by the given http url to activate a
* hostname.
*/
ownership_verification_http?: CertificateUpdateResponse.OwnershipVerificationHTTP;
ssl?: CertificateUpdateResponse.SSL;
/**
* Status of the hostname's activation.
*/
status?: 'active' | 'pending' | 'active_redeploying' | 'moved' | 'pending_deletion' | 'deleted' | 'pending_blocked' | 'pending_migration' | 'pending_provisioned' | 'test_pending' | 'test_active' | 'test_active_apex' | 'test_blocked' | 'test_failed' | 'provisioned' | 'blocked';
/**
* These are errors that were encountered while trying to activate a hostname.
*/
verification_errors?: Array<string>;
}
export declare namespace CertificateUpdateResponse {
/**
* This is a record which can be placed to activate a hostname.
*/
interface OwnershipVerification {
/**
* DNS Name for record.
*/
name?: string;
/**
* DNS Record type.
*/
type?: 'txt';
/**
* Content for the record.
*/
value?: string;
}
/**
* This presents the token to be served by the given http url to activate a
* hostname.
*/
interface OwnershipVerificationHTTP {
/**
* Token to be served.
*/
http_body?: string;
/**
* The HTTP URL that will be checked during custom hostname verification and where
* the customer should host the token.
*/
http_url?: string;
}
interface SSL {
/**
* Custom hostname SSL identifier tag.
*/
id?: string;
/**
* A ubiquitous bundle has the highest probability of being verified everywhere,
* even by clients using outdated or unusual trust stores. An optimal bundle uses
* the shortest chain and newest intermediates. And the force bundle verifies the
* chain, but does not otherwise modify it.
*/
bundle_method?: CustomHostnamesAPI.BundleMethod;
/**
* The Certificate Authority that will issue the certificate.
*/
certificate_authority?: Shared.CertificateCA;
/**
* If a custom uploaded certificate is used.
*/
custom_certificate?: string;
/**
* The identifier for the Custom CSR that was used.
*/
custom_csr_id?: string;
/**
* The key for a custom uploaded certificate.
*/
custom_key?: string;
/**
* DCV Delegation records for domain validation.
*/
dcv_delegation_records?: Array<SSL.DCVDelegationRecord>;
/**
* The time the custom certificate expires on.
*/
expires_on?: string;
/**
* A list of Hostnames on a custom uploaded certificate.
*/
hosts?: Array<string>;
/**
* The issuer on a custom uploaded certificate.
*/
issuer?: string;
/**
* Domain control validation (DCV) method used for this hostname.
*/
method?: CustomHostnamesAPI.DCVMethod;
/**
* The serial number on a custom uploaded certificate.
*/
serial_number?: string;
settings?: SSL.Settings;
/**
* The signature on a custom uploaded certificate.
*/
signature?: string;
/**
* Status of the hostname's SSL certificates.
*/
status?: 'initializing' | 'pending_validation' | 'deleted' | 'pending_issuance' | 'pending_deployment' | 'pending_deletion' | 'pending_expiration' | 'expired' | 'active' | 'initializing_timed_out' | 'validation_timed_out' | 'issuance_timed_out' | 'deployment_timed_out' | 'deletion_timed_out' | 'pending_cleanup' | 'staging_deployment' | 'staging_active' | 'deactivating' | 'inactive' | 'backup_issued' | 'holding_deployment';
/**
* Level of validation to be used for this hostname. Domain validation (dv) must be
* used.
*/
type?: CustomHostnamesAPI.DomainValidationType;
/**
* The time the custom certificate was uploaded.
*/
uploaded_on?: string;
/**
* Domain validation errors that have been received by the certificate authority
* (CA).
*/
validation_errors?: Array<SSL.ValidationError>;
validation_records?: Array<SSL.ValidationRecord>;
/**
* Indicates whether the certificate covers a wildcard.
*/
wildcard?: boolean;
}
namespace SSL {
interface DCVDelegationRecord {
/**
* The CNAME record hostname for DCV delegation.
*/
cname?: string;
/**
* The CNAME record target value for DCV delegation.
*/
cname_target?: string;
/**
* The set of email addresses that the certificate authority (CA) will use to
* complete domain validation.
*/
emails?: Array<string>;
/**
* The content that the certificate authority (CA) will expect to find at the
* http_url during the domain validation.
*/
http_body?: string;
/**
* The url that will be checked during domain validation.
*/
http_url?: string;
/**
* Status of the validation record.
*/
status?: string;
/**
* The hostname that the certificate authority (CA) will check for a TXT record
* during domain validation .
*/
txt_name?: string;
/**
* The TXT record that the certificate authority (CA) will check during domain
* validation.
*/
txt_value?: string;
}
interface Settings {
/**
* An allowlist of ciphers for TLS termination. These ciphers must be in the
* BoringSSL format.
*/
ciphers?: Array<string>;
/**
* Whether or not Early Hints is enabled.
*/
early_hints?: 'on' | 'off';
/**
* Whether or not HTTP2 is enabled.
*/
http2?: 'on' | 'off';
/**
* The minimum TLS version supported.
*/
min_tls_version?: '1.0' | '1.1' | '1.2' | '1.3';
/**
* Whether or not TLS 1.3 is enabled.
*/
tls_1_3?: 'on' | 'off';
}
interface ValidationError {
/**
* A domain validation error.
*/
message?: string;
}
interface ValidationRecord {
/**
* The CNAME record hostname for DCV delegation.
*/
cname?: string;
/**
* The CNAME record target value for DCV delegation.
*/
cname_target?: string;
/**
* The set of email addresses that the certificate authority (CA) will use to
* complete domain validation.
*/
emails?: Array<string>;
/**
* The content that the certificate authority (CA) will expect to find at the
* http_url during the domain validation.
*/
http_body?: string;
/**
* The url that will be checked during domain validation.
*/
http_url?: string;
/**
* Status of the validation record.
*/
status?: string;
/**
* The hostname that the certificate authority (CA) will check for a TXT record
* during domain validation .
*/
txt_name?: string;
/**
* The TXT record that the certificate authority (CA) will check during domain
* validation.
*/
txt_value?: string;
}
}
}
export interface CertificateDeleteResponse {
/**
* Custom hostname identifier tag.
*/
id?: string;
}
export interface CertificateUpdateParams {
/**
* Path param: Identifier.
*/
zone_id: string;
/**
* Path param: Custom hostname identifier tag.
*/
custom_hostname_id: string;
/**
* Path param: Custom hostname identifier tag.
*/
certificate_pack_id: string;
/**
* Body param: If a custom uploaded certificate is used.
*/
custom_certificate: string;
/**
* Body param: The key for a custom uploaded certificate.
*/
custom_key: string;
}
export interface CertificateDeleteParams {
/**
* Identifier.
*/
zone_id: string;
/**
* Custom hostname identifier tag.
*/
custom_hostname_id: string;
/**
* Custom hostname identifier tag.
*/
certificate_pack_id: string;
}
export declare namespace Certificates {
export { type CertificateUpdateResponse as CertificateUpdateResponse, type CertificateDeleteResponse as CertificateDeleteResponse, type CertificateUpdateParams as CertificateUpdateParams, type CertificateDeleteParams as CertificateDeleteParams, };
}
//# sourceMappingURL=certificates.d.ts.map