Trust store that contains trust anchors and optional intermediate CAs used in PKI to build a trust chain(trust hierarchy) and verify a client's identity.
| JSON representation |
|---|
{ "trustAnchors": [ { object ( |
| Fields | |
|---|---|
trustAnchors[] |
Required. List of trust anchors to be used while performing validation against a given TrustStore. The incoming end entity's certificate must be in the trust chain of one of the trust anchors here. |
intermediateCas[] |
Optional. Set of intermediate CA certificates used for building the trust chain to the trust anchor. Important: Intermediate CAs are only supported for X.509 federation. |
TrustAnchor
Represents a root of trust.
| JSON representation |
|---|
{ // Union field |
| Fields | |
|---|---|
Union field
|
|
pemCertificate |
PEM certificate of the PKI used for validation. Must only contain one ca certificate(either root or intermediate cert). |
IntermediateCA
Intermediate CA certificates used for building the trust chain to trust anchor
| JSON representation |
|---|
{ // Union field |
| Fields | |
|---|---|
Union field
|
|
pemCertificate |
PEM certificate of the PKI used for validation. Must only contain one ca certificate. |