Skip to content

Commit 42a0ec7

Browse files
authored
Merge pull request #8163 from ovh/dev/gbarideau/kms-rsa-certificate
KMS : Adding "certificateType" option
2 parents 9b59649 + 468b690 commit 42a0ec7

15 files changed

+105
-30
lines changed

pages/manage_and_operate/kms/quick-start/guide.de-de.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Getting started with OVHcloud Key Management Service (KMS)"
33
excerpt: "Discover the steps you need to take to set up your first Key Management Service (KMS), create a key, and access it"
4-
updated: 2025-05-12
4+
updated: 2025-07-15
55
---
66

77
## Objective
@@ -70,7 +70,7 @@ It's possible to create this certificate from the dedicated entry on the adminis
7070

7171
![Create a certificate](images/create_certificat_01.png){.thumbnail}
7272

73-
The first part of the form allows you to precise its validity duration and providing or not your Certificate Signing Request (CSR) in case you have your own private key
73+
The first part of the form allows you to precise its validity duration, choose signature algorithm, and providing or not your Certificate Signing Request (CSR) in case you have your own private key.
7474

7575
- Without providing a private key:
7676

@@ -208,6 +208,7 @@ The following information is required:
208208
- **name**: the name of the certificate
209209
- **identityURNs**: list of OVHcloud identities in URN format that will be provided to the IAM for calculating access rights
210210
- **description**: certificate description (optional)
211+
- **certificateType** : certificate signature algorithm (ECDSA or RSA) - ECDSA by default (optional)
211212
- **validity**: certificate validity duration in days - 365 days by default (optional)
212213

213214
**Example of certificate creation with root account:**
@@ -248,6 +249,7 @@ The API then returns the certificate creation status:
248249
"urn:v1:eu:identity:user:xx1111-ovh/john.smith",
249250
"urn:v1:eu:identity:group:xx1111-ovh/my_group"
250251
],
252+
"certificateType": "ECDSA",
251253
"status": "CREATING",
252254
"fromCSR": false,
253255
"privateKeyPEM": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDOfWuMVQxl5quoURzThF4zTI9YYTmylSaPjneLBwP+2oAoGCCqGSM49\nAwEHoUQDQgAERd1eMw0YdAD+E9oSymGc4bCL1mfJl0EZwoM2ya/uKFFVFnGMnckg\nXXXXXXXXXXXXXXX==\n-----END EC PRIVATE KEY-----\n",
@@ -288,6 +290,7 @@ The API returns the certificate in PEM:
288290
],
289291
"status": "READY",
290292
"fromCSR": false,
293+
"certificateType": "ECDSA",
291294
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
292295
"createdAt": "2024-04-04T12:26:28.856619+02:00",
293296
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
@@ -353,6 +356,7 @@ The API then returns the certificate creation status:
353356
],
354357
"status": "CREATING",
355358
"fromCSR": true,
359+
"certificateType": "ECDSA",
356360
"createdAt": "2024-04-04T12:26:28.856619+02:00",
357361
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
358362
}
@@ -378,6 +382,7 @@ The API returns the certificate in PEM:
378382
],
379383
"status": "READY",
380384
"fromCSR": true,
385+
"certificateType": "ECDSA",
381386
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
382387
"createdAt": "2024-04-04T12:26:28.856619+02:00",
383388
"expiredAt": "2025-04-04T12:26:28.856616+02:00"

pages/manage_and_operate/kms/quick-start/guide.en-asia.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Getting started with OVHcloud Key Management Service (KMS)"
33
excerpt: "Discover the steps you need to take to set up your first Key Management Service (KMS), create a key, and access it"
4-
updated: 2025-05-12
4+
updated: 2025-07-15
55
---
66

77
## Objective
@@ -70,7 +70,7 @@ It's possible to create this certificate from the dedicated entry on the adminis
7070

7171
![Create a certificate](images/create_certificat_01.png){.thumbnail}
7272

73-
The first part of the form allows you to precise its validity duration and providing or not your Certificate Signing Request (CSR) in case you have your own private key
73+
The first part of the form allows you to precise its validity duration, choose signature algorithm, and providing or not your Certificate Signing Request (CSR) in case you have your own private key.
7474

7575
- Without providing a private key:
7676

@@ -208,6 +208,7 @@ The following information is required:
208208
- **name**: the name of the certificate
209209
- **identityURNs**: list of OVHcloud identities in URN format that will be provided to the IAM for calculating access rights
210210
- **description**: certificate description (optional)
211+
- **certificateType** : certificate signature algorithm (ECDSA or RSA) - ECDSA by default (optional)
211212
- **validity**: certificate validity duration in days - 365 days by default (optional)
212213

213214
**Example of certificate creation with root account:**
@@ -248,6 +249,7 @@ The API then returns the certificate creation status:
248249
"urn:v1:eu:identity:user:xx1111-ovh/john.smith",
249250
"urn:v1:eu:identity:group:xx1111-ovh/my_group"
250251
],
252+
"certificateType": "ECDSA",
251253
"status": "CREATING",
252254
"fromCSR": false,
253255
"privateKeyPEM": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDOfWuMVQxl5quoURzThF4zTI9YYTmylSaPjneLBwP+2oAoGCCqGSM49\nAwEHoUQDQgAERd1eMw0YdAD+E9oSymGc4bCL1mfJl0EZwoM2ya/uKFFVFnGMnckg\nXXXXXXXXXXXXXXX==\n-----END EC PRIVATE KEY-----\n",
@@ -288,6 +290,7 @@ The API returns the certificate in PEM:
288290
],
289291
"status": "READY",
290292
"fromCSR": false,
293+
"certificateType": "ECDSA",
291294
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
292295
"createdAt": "2024-04-04T12:26:28.856619+02:00",
293296
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
@@ -353,6 +356,7 @@ The API then returns the certificate creation status:
353356
],
354357
"status": "CREATING",
355358
"fromCSR": true,
359+
"certificateType": "ECDSA",
356360
"createdAt": "2024-04-04T12:26:28.856619+02:00",
357361
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
358362
}
@@ -378,6 +382,7 @@ The API returns the certificate in PEM:
378382
],
379383
"status": "READY",
380384
"fromCSR": true,
385+
"certificateType": "ECDSA",
381386
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
382387
"createdAt": "2024-04-04T12:26:28.856619+02:00",
383388
"expiredAt": "2025-04-04T12:26:28.856616+02:00"

pages/manage_and_operate/kms/quick-start/guide.en-au.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Getting started with OVHcloud Key Management Service (KMS)"
33
excerpt: "Discover the steps you need to take to set up your first Key Management Service (KMS), create a key, and access it"
4-
updated: 2025-05-12
4+
updated: 2025-07-15
55
---
66

77
## Objective
@@ -70,7 +70,7 @@ It's possible to create this certificate from the dedicated entry on the adminis
7070

7171
![Create a certificate](images/create_certificat_01.png){.thumbnail}
7272

73-
The first part of the form allows you to precise its validity duration and providing or not your Certificate Signing Request (CSR) in case you have your own private key
73+
The first part of the form allows you to precise its validity duration, choose signature algorithm, and providing or not your Certificate Signing Request (CSR) in case you have your own private key.
7474

7575
- Without providing a private key:
7676

@@ -208,6 +208,7 @@ The following information is required:
208208
- **name**: the name of the certificate
209209
- **identityURNs**: list of OVHcloud identities in URN format that will be provided to the IAM for calculating access rights
210210
- **description**: certificate description (optional)
211+
- **certificateType** : certificate signature algorithm (ECDSA or RSA) - ECDSA by default (optional)
211212
- **validity**: certificate validity duration in days - 365 days by default (optional)
212213

213214
**Example of certificate creation with root account:**
@@ -248,6 +249,7 @@ The API then returns the certificate creation status:
248249
"urn:v1:eu:identity:user:xx1111-ovh/john.smith",
249250
"urn:v1:eu:identity:group:xx1111-ovh/my_group"
250251
],
252+
"certificateType": "ECDSA",
251253
"status": "CREATING",
252254
"fromCSR": false,
253255
"privateKeyPEM": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDOfWuMVQxl5quoURzThF4zTI9YYTmylSaPjneLBwP+2oAoGCCqGSM49\nAwEHoUQDQgAERd1eMw0YdAD+E9oSymGc4bCL1mfJl0EZwoM2ya/uKFFVFnGMnckg\nXXXXXXXXXXXXXXX==\n-----END EC PRIVATE KEY-----\n",
@@ -288,6 +290,7 @@ The API returns the certificate in PEM:
288290
],
289291
"status": "READY",
290292
"fromCSR": false,
293+
"certificateType": "ECDSA",
291294
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
292295
"createdAt": "2024-04-04T12:26:28.856619+02:00",
293296
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
@@ -353,6 +356,7 @@ The API then returns the certificate creation status:
353356
],
354357
"status": "CREATING",
355358
"fromCSR": true,
359+
"certificateType": "ECDSA",
356360
"createdAt": "2024-04-04T12:26:28.856619+02:00",
357361
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
358362
}
@@ -378,6 +382,7 @@ The API returns the certificate in PEM:
378382
],
379383
"status": "READY",
380384
"fromCSR": true,
385+
"certificateType": "ECDSA",
381386
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
382387
"createdAt": "2024-04-04T12:26:28.856619+02:00",
383388
"expiredAt": "2025-04-04T12:26:28.856616+02:00"

pages/manage_and_operate/kms/quick-start/guide.en-ca.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Getting started with OVHcloud Key Management Service (KMS)"
33
excerpt: "Discover the steps you need to take to set up your first Key Management Service (KMS), create a key, and access it"
4-
updated: 2025-05-12
4+
updated: 2025-07-15
55
---
66

77
## Objective
@@ -70,7 +70,7 @@ It's possible to create this certificate from the dedicated entry on the adminis
7070

7171
![Create a certificate](images/create_certificat_01.png){.thumbnail}
7272

73-
The first part of the form allows you to precise its validity duration and providing or not your Certificate Signing Request (CSR) in case you have your own private key
73+
The first part of the form allows you to precise its validity duration, choose signature algorithm, and providing or not your Certificate Signing Request (CSR) in case you have your own private key.
7474

7575
- Without providing a private key:
7676

@@ -208,6 +208,7 @@ The following information is required:
208208
- **name**: the name of the certificate
209209
- **identityURNs**: list of OVHcloud identities in URN format that will be provided to the IAM for calculating access rights
210210
- **description**: certificate description (optional)
211+
- **certificateType** : certificate signature algorithm (ECDSA or RSA) - ECDSA by default (optional)
211212
- **validity**: certificate validity duration in days - 365 days by default (optional)
212213

213214
**Example of certificate creation with root account:**
@@ -248,6 +249,7 @@ The API then returns the certificate creation status:
248249
"urn:v1:eu:identity:user:xx1111-ovh/john.smith",
249250
"urn:v1:eu:identity:group:xx1111-ovh/my_group"
250251
],
252+
"certificateType": "ECDSA",
251253
"status": "CREATING",
252254
"fromCSR": false,
253255
"privateKeyPEM": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDOfWuMVQxl5quoURzThF4zTI9YYTmylSaPjneLBwP+2oAoGCCqGSM49\nAwEHoUQDQgAERd1eMw0YdAD+E9oSymGc4bCL1mfJl0EZwoM2ya/uKFFVFnGMnckg\nXXXXXXXXXXXXXXX==\n-----END EC PRIVATE KEY-----\n",
@@ -288,6 +290,7 @@ The API returns the certificate in PEM:
288290
],
289291
"status": "READY",
290292
"fromCSR": false,
293+
"certificateType": "ECDSA",
291294
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
292295
"createdAt": "2024-04-04T12:26:28.856619+02:00",
293296
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
@@ -353,6 +356,7 @@ The API then returns the certificate creation status:
353356
],
354357
"status": "CREATING",
355358
"fromCSR": true,
359+
"certificateType": "ECDSA",
356360
"createdAt": "2024-04-04T12:26:28.856619+02:00",
357361
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
358362
}
@@ -378,6 +382,7 @@ The API returns the certificate in PEM:
378382
],
379383
"status": "READY",
380384
"fromCSR": true,
385+
"certificateType": "ECDSA",
381386
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
382387
"createdAt": "2024-04-04T12:26:28.856619+02:00",
383388
"expiredAt": "2025-04-04T12:26:28.856616+02:00"

pages/manage_and_operate/kms/quick-start/guide.en-gb.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "Getting started with OVHcloud Key Management Service (KMS)"
33
excerpt: "Discover the steps you need to take to set up your first Key Management Service (KMS), create a key, and access it"
4-
updated: 2025-05-12
4+
updated: 2025-07-15
55
---
66

77
## Objective
@@ -70,7 +70,7 @@ It's possible to create this certificate from the dedicated entry on the adminis
7070

7171
![Create a certificate](images/create_certificat_01.png){.thumbnail}
7272

73-
The first part of the form allows you to precise its validity duration and providing or not your Certificate Signing Request (CSR) in case you have your own private key
73+
The first part of the form allows you to precise its validity duration, choose signature algorithm, and providing or not your Certificate Signing Request (CSR) in case you have your own private key.
7474

7575
- Without providing a private key:
7676

@@ -208,6 +208,7 @@ The following information is required:
208208
- **name**: the name of the certificate
209209
- **identityURNs**: list of OVHcloud identities in URN format that will be provided to the IAM for calculating access rights
210210
- **description**: certificate description (optional)
211+
- **certificateType** : certificate signature algorithm (ECDSA or RSA) - ECDSA by default (optional)
211212
- **validity**: certificate validity duration in days - 365 days by default (optional)
212213

213214
**Example of certificate creation with root account:**
@@ -248,6 +249,7 @@ The API then returns the certificate creation status:
248249
"urn:v1:eu:identity:user:xx1111-ovh/john.smith",
249250
"urn:v1:eu:identity:group:xx1111-ovh/my_group"
250251
],
252+
"certificateType": "ECDSA",
251253
"status": "CREATING",
252254
"fromCSR": false,
253255
"privateKeyPEM": "-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIDOfWuMVQxl5quoURzThF4zTI9YYTmylSaPjneLBwP+2oAoGCCqGSM49\nAwEHoUQDQgAERd1eMw0YdAD+E9oSymGc4bCL1mfJl0EZwoM2ya/uKFFVFnGMnckg\nXXXXXXXXXXXXXXX==\n-----END EC PRIVATE KEY-----\n",
@@ -288,6 +290,7 @@ The API returns the certificate in PEM:
288290
],
289291
"status": "READY",
290292
"fromCSR": false,
293+
"certificateType": "ECDSA",
291294
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
292295
"createdAt": "2024-04-04T12:26:28.856619+02:00",
293296
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
@@ -353,6 +356,7 @@ The API then returns the certificate creation status:
353356
],
354357
"status": "CREATING",
355358
"fromCSR": true,
359+
"certificateType": "ECDSA",
356360
"createdAt": "2024-04-04T12:26:28.856619+02:00",
357361
"expiredAt": "2025-04-04T12:26:28.856616+02:00"
358362
}
@@ -378,6 +382,7 @@ The API returns the certificate in PEM:
378382
],
379383
"status": "READY",
380384
"fromCSR": true,
385+
"certificateType": "ECDSA",
381386
"certificatePEM": "-----BEGIN CERTIFICATE-----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\nDlyP5HhrWyFB9BICIDl5wtUWgCmo6TjOqXXXXXXXXXXXXXX\n-----END CERTIFICATE-----",
382387
"createdAt": "2024-04-04T12:26:28.856619+02:00",
383388
"expiredAt": "2025-04-04T12:26:28.856616+02:00"

0 commit comments

Comments
 (0)