get_revocation_status
async
¶
get_revocation_status(
signature_timestamp: Timestamp,
platform_id: PlatformId,
profile_version_arn: Arn,
job_arn: Arn,
certificate_hashes: CertificateHashes,
*,
config_overrides: Optional[AsyncsignerClientConfig] = None,
) -> GetRevocationStatusResponse
Retrieves the revocation status of one or more of the signing profile, signing job, and signing certificate.
Parameters:
-
signature_timestamp(Timestamp) –The timestamp of the signature that validates the profile or job.
-
platform_id(PlatformId) –The ID of a signing platform.
-
profile_version_arn(Arn) –The version of a signing profile.
-
job_arn(Arn) –The ARN of a signing job.
-
certificate_hashes(CertificateHashes) –A list of composite signed hashes that identify certificates.
A certificate identifier consists of a subject certificate TBS hash (signed by the parent CA) combined with a parent CA TBS hash (signed by the parent CA’s CA). Root certificates are defined as their own CA.
The following example shows how to calculate a hash for this parameter using OpenSSL commands:
openssl asn1parse -in childCert.pem -strparse 4 -out childCert.tbsopenssl sha384 < childCert.tbs -binary > childCertTbsHashopenssl asn1parse -in parentCert.pem -strparse 4 -out parentCert.tbsopenssl sha384 < parentCert.tbs -binary > parentCertTbsHash xxd -p childCertTbsHash > certificateHash.hex xxd -p parentCertTbsHash >> certificateHash.hexcat certificateHash.hex | tr -d '\n'
Raises:
-
AccessDeniedException–You do not have sufficient access to perform this action.
-
InternalServiceErrorException–An internal error occurred.
-
TooManyRequestsException–The allowed number of job-signing requests has been exceeded.
This error supersedes the error
ThrottlingException. -
ValidationException–You signing certificate could not be validated.
-
UnknownServiceError–The service returned an error code this client does not model.