All Products
Search
Document Center

ApsaraMQ for MQTT:RegisterCaCertificate

Last Updated:Feb 26, 2025

RegisterCaCertificate

Operation description

  • Only ApsaraMQ for MQTT Enterprise Platinum Edition instances support this operation.
  • You can call this operation up to 500 times per second per Alibaba Cloud account. If you want to increase the limit, join the DingTalk group (ID: 35228338) to contact ApsaraMQ for MQTT technical support.

Debugging

You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
MqttInstanceIdstringYes

The ID of the ApsaraMQ for MQTT instance to which you want to bind the CA certificate.

post-cn-7mz2d******
CaNamestringYes

The name of the CA certificate that you want to register with an ApsaraMQ for MQTT broker.

mqtt_ca
CaContentstringYes

The content of the CA certificate that you want to register with an ApsaraMQ for MQTT broker.

Note In the example, \n indicates a line feed.
-----BEGIN CERTIFICATE-----\nMIIDuzCCAqdGVzdC5jbi1xaW5n******\n-----END CERTIFICATE-----
VerificationContentstringYes

The content of the validation certificate issued by the CA certificate that you want to register with an ApsaraMQ for MQTT broker. The validation certificate must be used together with the registration code of the CA certificate to verify the private key of the CA certificate.

Note In the example, \n indicates a line feed.
-----BEGIN CERTIFICATE-----\nMIID/DCCAu+Y5sRMpp9tnd+4s******\n-----END CERTIFICATE-----

Response parameters

ParameterTypeDescriptionExample
object

Schema of Response

RequestIdstring

The request ID.

020F6A43-19E6-4B6E-B846-44EB31DF****
Snstring

The serial number of the registered CA certificate. The serial number is the unique identifier of a CA certificate.

007269004887******

Examples

Sample success responses

JSONformat

{
  "RequestId": "020F6A43-19E6-4B6E-B846-44EB31DF****",
  "Sn": "007269004887******"
}

Error codes

HTTP status codeError codeError message
400ParameterFieldCheckFailedFailed to validate the parameters. The parameters may be missing or invalid.
400InstancePermissionCheckFailedAn error occurred while validating the permissions of the instance. Please verify the account that created the instance and its permissions settings.
500RegisterCodeErrorRegister code error in verification certificate.
500RegisterCodeUsedRegister code has been used.
500GetCaNumErrorFailed to get ca num. Try again later.
500CaNumExceedCA certificate num exceed
500CertificateContentErrorCertificate content error, please check ca/verification certificate content. BasicConstraints extension should be set to true in CA certificate
500SnNotUniqueSn is not unique in gloabal
500MqttOwnerCheckErrorFailed to validate the instance permission
500MqttInstanceNotFoundSpecified instance is not found

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2025-02-18The Error code has changedView Change Details
2024-03-20The Error code has changedView Change Details
2022-08-24The Error code has changedView Change Details
  • Only Platinum and Professional instances support using the RegisterCaCertificate interface. - The request frequency limit per user is 500 times/second. For special requirements, please contact Cloud Message Queue MQTT version technical support, DingTalk group number: 35228338.