Table of Contents

Class FulcioClient

Namespace
Sigstore.Fulcio
Assembly
Sigstore.dll

Fulcio CA client using the gRPC-JSON HTTP/1.1 compatible endpoint.

public sealed class FulcioClient : IFulcioClient
Inheritance
FulcioClient
Implements
Inherited Members

Constructors

FulcioClient(HttpClient, Uri)

Creates a Fulcio client.

public FulcioClient(HttpClient httpClient, Uri baseUrl)

Parameters

httpClient HttpClient
baseUrl Uri

Fields

HttpClientName

Named HttpClient key used for DI registration.

public const string HttpClientName = "Sigstore.Fulcio"

Field Value

string

Methods

GetSigningCertificateAsync(byte[], string, CancellationToken)

Requests a signing certificate from Fulcio.

public Task<X509Certificate2Collection> GetSigningCertificateAsync(byte[] csrDer, string idToken, CancellationToken cancellationToken)

Parameters

csrDer byte[]

DER-encoded PKCS#10 certificate signing request.

idToken string

OIDC identity token.

cancellationToken CancellationToken

Cancellation token.

Returns

Task<X509Certificate2Collection>

Certificate chain (leaf first).