Upload an MQTT CA certificate

POST 
/api/v1/orgs/{orgId}/data-bridges/mqtt-ca-certificates

Upload a public PEM- or DER-encoded CA certificate for an mqtts broker.

Constraints:

• name: required, 1-128 characters, unique within the organization
• certificate: required and non-empty. The content is validated as PEM or DER; the file extension is ignored
• certificate content limit: 40 KB (40960 bytes)
• Private keys are rejected; the payload must contain only a public certificate
• Exactly one certificate per upload. A chain bundle (several PEM blocks, such as ca-bundle.pem) is rejected. Upload the CA that signs the broker certificate; intermediates are taken from the broker's own handshake

An empty, unparsable or private-key payload returns 400 WEDA.DataBridge.InvalidCaCertificate. A certificate over the 40 KB limit returns 413 WEDA.DataBridge.CaCertificateTooLarge. An already expired certificate is stored and the response reports isExpired: true. Trust and expiry are enforced at connection time, not at upload.

Request

Responses

201

CA certificate stored. Certificate content is not returned.

400

The certificate payload is invalid.

401

Authentication is missing or invalid.

403

The caller lacks the required role for this operation.

413

The upload exceeds the 40960-byte certificate limit.