NAME

gcloud kms keys versions get-certificate-chain - get a certificate chain for a given version

SYNOPSIS

gcloud kms keys versions get-certificate-chain VERSION [--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] [--output-file=OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION

Returns the PEM-format certificate chain for the specified key version. The optional flag output-file indicates the path to store the PEM. If not specified, the PEM will be printed to stdout.

EXAMPLES

The following command saves the Cavium certificate chain for CryptoKey frodo Version 2 to /tmp/my/cavium.pem:

$ gcloud kms keys versions get-certificate-chain 2 --key=frodo \ --keyring=fellowship --location=us-east1 \ --certificate-chain-type=cavium --output-file=/tmp/my/cavium.pem

POSITIONAL ARGUMENTS

VERSION

Name of the version from which to get the certificate chain.

FLAGS

--certificate-chain-type=CERTIFICATE_CHAIN_TYPE; default="all"

Certificate chain to retrieve. CERTIFICATE_CHAIN_TYPE must be one of: all, cavium, google-card, google-partition.

--key=KEY

The containing key.

--keyring=KEYRING

Key ring of the key.

--location=LOCATION

Location of the keyring.

--output-file=OUTPUT_FILE

Path to the output file to store PEM.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

These variants are also available:

$ gcloud alpha kms keys versions get-certificate-chain

$ gcloud beta kms keys versions get-certificate-chain