Skip to main content

post_cms_fullcmc

kipuka::routes::cms_est

Function post_cms_fullcmc 

Source 
pub async fn post_cms_fullcmc(
    label: LabelExtractor,
    __arg1: State<Arc<AppState>>,
    body: Bytes,
) -> Result<Response, KipukaError>
Expand description

POST /.well-known/est/cms/fullcmc

CMS-wrapped Full CMC request (RFC 8295 §4 + RFC 7030 §4.3).

The outer CMS SignedData provides message-level authentication; the inner payload is the CMC request (itself a SignedData containing PKIData). The signer MUST hold the id-kp-cmcRA EKU.