POST Codesign/RetrieveArchiveEntries

The following keys can be passed in the ArchiveFilter object. Results must match all of the values passed. See the example section below for complete syntax.

The percent character % can be used as a wildcard in any string.

Key name	Description and request example
ApplicationHash String	The hash of the signing application. Request example: "ApplicationHash": "AD63AF5%"
Artifact String	The hash or token of the binary. This hash is what was signed during the code signing operation. Request example: "Artifact": "MDEwDQY%"
AuthenticatedUser String	The prefixed universal UUID of the user that signed. Use POST Identity/Browse to look up the prefixed universal for an identity. Request example: "AuthenticatedUser": "local:{9a06d381-0a9e-4ec7-92ce-e0d40abc71c4}"
ClientInterface Integer	The signing client interface used to sign. The following integers are valid: 0: Unknown interface 1: PKCS11Config Interface 2: CSPConfig Interface 3: GPGConfig Interface 4: TKDriverConfig Interface 5: VenaifiSCD Interface 6: Venafi Code Signing Token Driver Interface Request example: "ClientInterface": 1
ClientLibraryName String	The client library used to sign. Request example: "ClientLibraryName": "pkcs11"
ClientLibraryVersion String	The version of the library used to sign. Request example: "ClientLibraryVersion": "22.2.3 (Crypto Library: mbed TLS 2.27.0)"
ClientMechanism Integer	The mechanism used before hashing the data to send for signing. Request example: "ClientMechanism": 64
Command String	The command that was used to sign, if the command was sent during signing. Request example: "Command": "/opt/venafi/codesign/bin/pkcs11config sign -file /tmp/test.out -label White-List-PKCS11-Allowed -output /tmp/test.sig"
EnvironmentDNs Array of strings	List of DNs for multiple Code Signing Environments. Request example: "EnvironmentDNs": [ "\\VED\\Code Signing\\Projects\\White List\\PKCS11 Allowed", "\\VED\\Code Signing\\Projects\\Testing\\ECCP256" ]
EnvironmentDN String	DN of the Code Signing Environment. Request example: "EnvironmentDN": "\\VED\\Code Signing\\Projects\\White List\\PKCS11 Allowed"
EventId Integer	Log event ID, converted from a hexadecimal value into an integer. Request example: "EventId": 1610743809
ExecutableLocation Srting	File system location of the executable used to sign. Request example: "ExecutableLocation": "/usr/local/bin/pkcs11config"
Executable String	Name of the executable that was used to sign. Request example: "Executable": "pkcs11config"
FlowDN String	DN of the Flow used. Request example: "FlowDN": "\\VED\\Code Signing\\Flows\\No Restrictions"
Grouping Integer	Number used in CodeSign Protect to group signing operations together. Request example: "Grouping": 565083052
IPAddress String	IP address of the system used to sign. Request example: "IPAddress": "172.17.24.80"
KeyType String	Key type used to sign. Request example: "KeyType": "ECDSA P256"
KeyVaultId Integer	SecretStore Vault ID of the signing private key. Request example: "KeyVaultId": 91275 Obtaining the Vault ID There are two ways to obtain the Vault ID: API call Use POST Config/Read Example request: { "ObjectDN": "\\VED\\Policy\\Code Signing\\Certificates\\Apple RSA2048 Certificate", "AttributeName":"Private Key Vault Id" } Example response: { "Result": 1, "Values": [ "91275" ] } Web Console In Policy Tree, navigate to your signing certificate or key. Click the Support tab.
Machine String	Name of the system used to sign. Request example: "Machine": "cs-macos11-int1.local"
Mechanism Integer	The Mechanism ID that represents the encryption algorithm for the signing operation. Request example: "Mechanism": 1
ProjectDNs Array of strings	List of DNs for multiple Code Signing Projects. Request example: "ProjectDNs": [ "\\VED\\Code Signing\\Projects\\White List", "\\VED\\Code Signing\\Projects\\Testing" ]
ProjectDN String	DN of the Code Signing Project. Request example: "ProjectDN": "\\VED\\Code Signing\\Projects\\White List"
RemoteAccount String	Account of the user executing the signing command on the signing workstation. Request example: "RemoteAccount": "jenkins"
TimestampAfter String	All entries with a timestamp prior to the provided timestamp will be excluded from the response. Request example: "TimestampAfter": "2022-11-18T22:44:12Z"
TimestampBefore String	All entries with a timestamp earlier than the provided timestamp will be excluded from the response. Request example: "TimestampBefore": "2022-11-20T23:59:59Z"

For valid requests, this call returns a HTTP 200 message and the following data in the message body:

• ArchiveResults: The ArchiveResults object includes the details of the code signing operations returned.

  • ApplicationHash: The hash of the application used to sign

  • Artifact: The hash or token that was signed

  • AuthenticatedUser: The prefixed universal of the key user's identity

  • ClientInterface: An integer representing the interface used to sign.

    • 0: Unknown interface

    • 1: PKCS11Config Interface

    • 2: CSPConfig Interface

    • 3: GPGConfig Interface

    • 4: TKDriverConfig Interface

    • 5: VenaifiSCD Interface

    • 6: Venafi Code Signing Token Driver Interface

  • ClientLibraryLocation: The file system location of the client library on the signing machine

  • ClientLibraryName: The name of the library used to sign

  • ClientLibraryVersion: The version number of the client library

  • ClientMechanism: The mechanism used before hashing the data to send for signing.

  • Command: The command that was used to sign

  • Environment: The DN of the Code Signing Environment

  • EventId: Log event ID, converted from a hexadecimal value into an integer

  • Executable: The executable used to sign

  • ExecutableLocation: The file system location of the executable on the signing machine

  • Flow: The DN of the Code Signing Flow

  • Grouping: Number used in CodeSign Protect to group signing operations together

  • IPAddress: The IP address of the machine where the code signing operation took place

  • KeyType: The key type that was used to sign

  • KeyVaultId: SecretStore Vault ID of the signing private key

  • Machine: The name of the machine where the code signing operation took place

  • Mechanism: The Mechanism ID that represents the encryption algorithm for signing the software

  • Project: The DN of the Code Signing Project

  • RemoteAccount: Account of the user executing the signing command on the signing workstation.

  • Timestamp: The time and date when the signing operation took place

• PageNumber: The page number of the results. The number of results per page is specified by the PageSize parameter.

• TotalCount: Total count of returned signing operations

• Error: Appears only when Success is false. An error message that accompanies the Result. Check your payload input values.