Provides a way to interact with the Akamai Certificate Provisioning System (CPS) via Open APIs. Provides various functionality such as viewing certificate details, generating audits, checking/acknowledging change statuses, creating/modifying certificates, and working with third party certificates.
In order to use this module, you need to:
--section <name>. E.g. for cps section pass --section cps.[cps]
client_secret = [CLIENT_SECRET]
host = [HOST]
access_token = [ACCESS_TOKEN_HERE]
client_token = [CLIENT_TOKEN_HERE]
Here is a summary of the current functionality:
Main program file that wraps this functionality in a command line utility:
Does a one time download of CPS enrollments and common names for faster local retrieval. This command can be run anytime and will refresh the /setup folder based on the current list of enrollments.
% akamai cps setup
List all current enrollments in Akamai CPS
% akamai cps list
% akamai cps list --show-expiration
(–show-expiration takes a little longer as fetches production expiration date)
Get specific details for an enrollment and outputs the details in raw json or yaml format. Please specify either –cn or –enrollment-id
% akamai cps retrieve-enrollment --cn sample.customer.com
% akamai cps retrieve-enrollment --enrollment-id 12345
% akamai cps retrieve-enrollment --cn sample.customer.com --json
% akamai cps retrieve-enrollment --cn sample.customer.com --yaml
Here are the flags of interest (please specify either –cn or –enrollment-id):
--cn <value> Common name (CN) of the enrollment
--enrollment-id <value> Enrollment id
--json Output in json format (Optional: will be default if nothing specified)
--yaml Output in yaml format (Optional)
Get specific details for the actual certificate deployed on the Akamai platform, including leaf, chain, or summary information. Please specify either –cn or –enrollment-id and one of –leaf, –chain, or –info arguments.
% akamai cps retrieve-deployed --cn sample.customer.com --info
% akamai cps retrieve-deployed --enrollment-id 12345 --info --network staging
% akamai cps retrieve-deployed --cn sample.customer.com --leaf --network production
% akamai cps retrieve-deployed --cn sample.customer.com --chain --network staging
Here are the flags of interest (please specify either –cn or –enrollment-id):
--cn <value> Common name (CN) of the enrollment
--enrollment-id <value> Enrollment id
--leaf Leaf certificate details
--chain Full chain certificate details
--info Summary information about deployed certificate
--network Either staging or production (optional: default is production)
Get current change status for an enrollment.
% akamai cps status --cn sample.customer.com
% akamai cps status --enrollment-id 12345
% akamai cps status --enrollment-id 12345 --validation-type http (use if certificate type is DV)
% akamai cps status --cn sample.customer.com --validation-type dns (use is certificate type is DV)
Here are the flags of interest (please specify either –cn or –enrollment-id):
--cn <value> Common name (CN) of the enrollment
--enrollment-id <value> Enrollment id
--validation-type Specify either 'http' or 'dns' (for DV certificates)
**If certificate type is third-party and CSR is ready, you may use this command to output the csr directly to a file:
% akamai cps status --cn sample-cn.example.com > file.csr
Generate an audit of all enrollments to a .xlsx, .csv, or .json file By default it generates report in csv format. Use –xlsx for xlsx Format Use –include-change-details to include current pending certificate details.
% akamai cps audit
% akamai cps audit --json
% akamai cps audit --csv
% akamai cps audit --xslx
% akamai cps audit --output-file sample.xlsx
% akamai cps audit --output-file sample.xlsx --include-change-details
Here are the flags of interest:
--include-change-details will include details and Order ID of current pending certificates
--csv csv format (optional: if not specificed, default is .csv)
--json json format (optional: if not specificed, default is .csv)
--xlsx xslx format (optional: if not specificed, default is .csv)
--output-file <value> Filename to be saved (optional: if not specifed, generated file will be put in audit folder).
Create a new certificate enrollment.
% akamai cps create --file /templates/sample.yml
% akamai cps create --file /templates/sample.json --force
The flags of interest are:
--file <value> Input file in yaml or json format with the enrollment details.
--force If specified, will not prompt for confirmation (optional)
--allow-duplicate-cn If specified, will allow a certificate to be created with the same CN as an existing certificate
Update a specified enrollment. Depending on the type of change, this may or may not trigger a new certificate deployment.
% akamai cps update --cn test.edgekey.net --file sample.yml
% akamai cps update --cn test.edgekey.net --file sample.json --force
% akamai cps update --cn test.edgekey.net --file sample.json --force-renewal
The flags of interest are (please specify either –cn or –enrollment-id):
--cn <value> Common name (CN) of the enrollment
--enrollment-id <value> Enrollment id
--file <value> Input file in yaml or json format with the enrollment details.
--force If specified, will not prompt for confirmation (optional)
--force-renewal If specified, force certificate renewal for enrollment (optional)
Cancel any current pending change for an enrollment. This will only delete the enrollment too if the certificate has never been deployed on the platform.
% akamai cps cancel --cn sample.customer.com
% akamai cps cancel --enrollment-id 12345
The flags of interest for cancel are (please specify either –cn or –enrollment-id):
--cn <value> Common name (CN) of the enrollment
--enrollment-id <value> Enrollment id
If there is a pending change that requires user input, proceed accordingly
% akamai cps proceed --cn sample.customer.com
% akamai cps proceed --enrollment-id 12345
% akamai cps proceed --enrollment-id 12345 --cert-file signed.csr --trust-file ca.crt --key-type rsa (use if third party certificate and ready to upload signed csr)
% akamai cps proceed --cn sample.customer.com --cert-file signed.csr --trust-file ca.crt --key-type ecdsa (use if third party certifcate and ready to upload signed csr)
Here are the flags of interest (please specify either –cn or –enrollment-id):
--cn <value> Common name (CN) of the enrollment
--enrollment-id <value> Enrollment id
--cert-file Signed certificate (PEM) file (for uploading third party certificates)
--trust-file Trust-chain (PEM) file (for uploading third party certificates)
--key-type RSA or ECDSA (for uploading third party certificates)
Remove a certificate and enrollment from the Akamai Network. This will only delete the enrollment if the certificate has no pending changes
% akamai cps delete --cn sample.customer.com
% akamai cps delete --enrollment-id 12345
The flags of interest for delete are (please specify either –cn or –enrollment-id):
--cn <value> Common name (CN) of the enrollment
--enrollment-id <value> Enrollment id
By submitting a contribution (the “Contribution”) to this project, and for good and valuable consideration, the receipt and sufficiency of which are hereby acknowledged, you (the “Assignor”) irrevocably convey, transfer, and assign the Contribution to the owner of the repository (the “Assignee”), and the Assignee hereby accepts, all of your right, title, and interest in and to the Contribution along with all associated copyrights, copyright registrations, and/or applications for registration and all issuances, extensions and renewals thereof (collectively, the “Assigned Copyrights”). You also assign all of your rights of any kind whatsoever accruing under the Assigned Copyrights provided by applicable law of any jurisdiction, by international treaties and conventions and otherwise throughout the world.
Copyright 2020 – Akamai Technologies, Inc.
All works contained in this repository, excepting those explicitly otherwise labeled, are the property of Akamai Technologies, Inc.