Signing Private Keys (privatekeysign)
The POST /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/privatekeysign API is called to sign the Gmail message digest. This API returns the base64 encoded signature.
Request Parameters
| Parameter | Type | Description |
|---|---|---|
| id | string | ID of the endpoint. To find out the ID of an endpoint, refer to Viewing KACLS Endpoints. |
| algorithm | string | Signing algorithm used to generate a signature. |
| digest | string | The base64 encoded message digest. |
| wrapped_private_key | string | The base64 encoded wrapped private key. |
| authorization | string | A JWT asserting that the user is allowed to unwrap the private key. |
| authentication | string | A JWT issued by a third-party asserting who the user is. |
| reason | string | Additional information about the operation. |
| rsa_pss_salt_length | int | The salt length to use if the signature algorithm is RSASSA-PSS. |
Example Request
POST /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/privatekeysign
{
"wrapped_private_key": "wHrlNOTI9mU6PBdqiq7EQA...",
"digest": "EOBc7nc+7JdIDeb0DVTHriBAbo/dfHFZJgeUhOyo67o=",
"authorization": "eyJhbGciOi...",
"authentication": "eyJhbGciOi...",
"algorithm": "SHA256withRSA",
"reason": "sign"
}
Example Response
{
"signature":
"LpyCSy5ddy82PIp/87JKaMF4Jmt1KdrbfT1iqpB7uhVd3OwZiu+oq8kxIzB7Lr0iX4aOcxM6HiUyMrGP2P
G8x0HkpykbUKQxBVcfm6SLdsqigT9ho5RYw20M6ZXNWVRetFSleKex4SRilTRny38e2ju/lUy0KDaCt1hDU
T89nLZ1wsO3D1F3xk8J7clXv5fe7GPRd1ojo82Ny0iyVO7y7h1lh2PACHUFXOMzsdURYFCnxhKAsadccCxp
CxKh5x8p78PdoenwY1tnT3/X4O/4LAGfT4fo98Frxy/xtI49WDRNZi6fsL6BQT4vS/WFkybBX9tXaenCqlR
BDyZSFhatPQ=="
}
Response Codes
| Response Code | Description |
|---|---|
| 2xx | Success |
| 4xx | Client errors |
Refer to HTTP status codes for details.
