Skip to main content

Upload an MQTT CA certificate

POST 
/api/v1/orgs/{orgId}/data-bridges/mqtt-ca-certificates

Upload a public PEM- or DER-encoded CA certificate for an mqtts broker.

Constraints:

  • name: required, 1-128 characters, unique within the organization
  • certificate: required and non-empty. The content is validated as PEM or DER; the file extension is ignored
  • certificate content limit: 40 KB (40960 bytes)
  • Private keys are rejected; the payload must contain only a public certificate
  • Exactly one certificate per upload. A chain bundle (several PEM blocks, such as ca-bundle.pem) is rejected. Upload the CA that signs the broker certificate; intermediates are taken from the broker's own handshake

An empty, unparsable or private-key payload returns 400 WEDA.DataBridge.InvalidCaCertificate. A certificate over the 40 KB limit returns 413 WEDA.DataBridge.CaCertificateTooLarge. An already expired certificate is stored and the response reports isExpired: true. Trust and expiry are enforced at connection time, not at upload.

Request​

Responses​

CA certificate stored. Certificate content is not returned.