CA set versions

List all versions for a CA set.

data "akamai_mtlstruststore_ca_set_versions" "my-ca-set-versions" {
  id = "12345"
}

output "my-ca-set-versions" {
  value = data.akamai_mtlstruststore_ca_set_versions.my-ca-set-versions
}
my-ca-set-versions = {
  active_versions_only = false
  ca_set_version_statuses = null
  id                   = "12345"
  include_certificates = true
  name                 = "my-ca-set"
  versions             = [
    {
      allow_insecure_sha1 = true
      certificates        = [
        {
          certificate_pem     = <<-EOT
                -----BEGIN CERTIFICATE-----
                MIID <sample - removed for readability> .... Mweq
                -----END CERTIFICATE-----
            EOT
          created_by          = "jsmith"
          created_date        = "2024-10-30T17:49:06.765624Z"
          description         = "certificate-1"
          end_date            = "2029-04-28T14:53:22Z"
          fingerprint         = "abc12345def6ghi78jklm9no012pqr456stu6vwx7yz89ab012cd34efghijklm56n"
          issuer              = "CN=AkamaiPKIRoot"
          serial_number       = "ab12c345def6gh7i8jklm9no012pqr4"
          signature_algorithm = "SHA1WITHRSA"
          start_date          = "2009-04-28T14:43:23Z"
          subject             = "CN=AkamaiPKIRoot"
        },
      ]
      created_by          = "jsmith"
      created_date        = "2024-11-04T11:43:39.173558Z"
      modified_by         = "jsmith"
      modified_date       = "2024-11-04T13:05:42.165Z"
      production_status   = "ACTIVE"
      removal_date        = null
      staging_status      = "INACTIVE"
      status              = "NOT_DELETED"
      version             = 1
      version_description = "Activating on production"
    },
    {
      allow_insecure_sha1 = false
      certificates        = [
        {
          certificate_pem     = <<-EOT
                -----BEGIN CERTIFICATE-----
                MIID <sample - removed for readability> .... Mweq
                -----END CERTIFICATE-----
            EOT
          created_by          = "jsmith"
          created_date        = "2023-10-25T15:07:58Z"
          description         = "certificate-2"
          end_date            = "2040-05-05T18:19:20Z"
          fingerprint         = "zy987xwv65ut43str2qp1on098mlk765jihg43fed21cba09zyxw87vutstrqp6onm"
          issuer              = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
          serial_number       = "9zy87x6wv5ut43str2qp1on098m7lk"
          signature_algorithm = "SHA256WITHECDSA"
          start_date          = "2015-05-05T18:09:20Z"
          subject             = "CN=AkamaiCorpRoot-G1, O=Akamai Technologies Inc."
        },
      ]
      created_by          = "jsmith"
      created_date        = "2024-11-04T12:55:55.345796Z"
      modified_by         = "jsmith"
      modified_date       = "2024-11-04T13:05:42.14594Z"
      production_status   = "INACTIVE"
      removal_date        = null
      staging_status      = "ACTIVE"
      status              = "NOT_DELETED"
      version             = 2
      version_description = "Activating on staging"
    },
  ]
}

Arguments

Pass a CA set's ID or name in the data block to get all of its versions. Provide additional arguments to narrow down your results.

ArgumentRequiredDescription
idYour CA set's ID.
nameYour CA set's name. It must match exactly. If there are multiple CA sets with the same name, you get an error. In this case, use the id argument.
include_certificatesWhen set to true or not specified, it returns certificates belonging to the version.
active_versions_onlyWhen set to true, it returns only active versions for a CA set. Defaults to false if not set.
ca_set_version_statusesLets you filter CA set versions by their status. Value is one of:
  • NOT_DELETED
  • DELETED
Default is NOT_DELETED.

Attributes

Returned to you is a set of versions for the CA set.

AttributeDescription
versionThe CA set's version number.
allow_insecure_sha1When set to true, it allows certificates with a SHA-1 signature. When set to false, it allows the version's certificates only with a signature algorithm of SHA-256 or better.
version_descriptionAny additional comments added to the CA set version when creating or updating it.
created_byThe user who created the CA set version.
created_dateThe timestamp indicating when the CA set version was created.
modified_byThe user who last modified the CA set version.
modified_dateThe timestamp indicating when the CA set version was modified.
staging_statusThe CA set version's status on the staging network, either ACTIVE or INACTIVE.
production_statusThe CA set version's status on the production network, either ACTIVE or INACTIVE.
certificatesThe list of certificates in the CA set version, with each record corresponding to one root or intermediate certificate.

  • certificate_pem. The certificate in PEM format, as found in a Base64 ASCII encoded file.

  • description. A human-readable description of the certificate.

  • created_by. The user who created the certificate.

  • created_date. The timestamp indicating when the certificate was created.

  • start_date. The timestamp indicating when the certificate started.

  • end_date. The timestamp indicating when the certificate expires.

  • fingerprint. The fingerprint of the certificate.

  • issuer. The certificate's issuer.

  • serial_number. The unique serial number of the certificate.

  • signature_algorithm. The signature algorithm of the certificate.

  • subject. The certificate's subject field.
removal_dateThe permanent deletion date for the CA set version. The value is null for a version not scheduled for deletion.
statusThe CA set version's status, either NOT_DELETED or DELETED.