Revoke a Client Certificate (RA)

After you have established a secure connection with UCL and generated a client certificate, you may want to revoke this certificate at some point. To revoke a client certificate, follow the steps in this tutorial.

NOTE

A revoked client certificate remains valid until it expires, but it cannot be renewed.

Prerequisites

• OpenSSL toolkit to create a Certificate Signing Request (CSR), keys, and certificates which meet high security standards
• UCL (previously called Compass)
• Registered Application
• Kyma runtime connected to UCL
• Established secure connection with UCL

NOTE

See how to maintain a secure connection with UCL and renew a client certificate.

Revoke the Certificate

To revoke a client certificate, make a call to the Certificate-Secured Connector URL using the client certificate. The Certificate-Secured Connector URL is the certificateSecuredConnectorURL obtained when establishing a secure connection with UCL. Send this mutation with the call:

mutation { result: revokeCertificate }

A successful call returns the following response:

{"data":{"result":true}}