Requests

The Requests page lets you manage certificate operations that require administrator approval. It has two tabs: Sign requests for new certificate issuance and Revoke requests for certificate revocation.

Requests list

Navigate to Operation → Private SSL → Requests to view all pending and processed requests.

Sign requests tab

This tab shows certificate signing requests (CSRs) submitted for approval.

The list shows:

Name: Common name with status badge (Requested, Signing, Signed, Denied, Canceled, Failed)
Authority: The CA that will sign the certificate
SAN: Subject Alternative Names
Valid for: Requested validity period
Administrator: CA owner who will approve or deny the request
Requested by: Who submitted the request
Requested at: When the request was submitted
Requested IP: IP address of the requester

Revoke requests tab

This tab shows requests to revoke existing certificates.

The list shows:

Name: Certificate common name with status badge (Requested, Revoking, Revoked, Denied, Canceled, Failed)
Reason: Revocation reason
Requested by: Who submitted the request
Requested at: When the request was submitted

Creating a sign request

Sign requests can only be created from the CLI.

Create a new sign request:

alpacon csr create

This opens an interactive editor to configure the CSR settings.

List all sign requests:

alpacon csr ls

View details of a specific request:

alpacon csr describe CSR_ID

Creating a revoke request

To revoke an existing certificate:

Go to Certificates tab and find the certificate
Click on the certificate and select Revoke
Select a revocation reason
Click Submit

Or from the CLI:

alpacon revoke create --certificate CERT_ID --reason CODE

Revocation reason codes

Code	Reason	Description
0	Unspecified	No specific reason provided
1	Key compromise	The certificate’s private key was compromised
2	CA compromise	The CA’s private key was compromised
3	Affiliation changed	The subject’s affiliation changed
4	Superseded	The certificate was replaced
5	Cessation of operation	The subject is no longer operating
6	Certificate hold	Temporarily suspended
9	Privilege withdrawn	The subject’s privileges were revoked
10	AA compromise	The attribute authority was compromised

Request detail

Sign request detail

Opening a sign request shows: Authority, Admin (the CA owner), Status, Valid for, Requested by, Requested at, Requested IP, and Handled at. Approved by appears once the request is signed; Denied by appears if it was denied.

The Subject alternative name (SAN) is shown as two separate lists—domain names and IP addresses. The CSR text is shown in full, and when the request is Signed, a Download .csr button is available.

Revoke request detail

Opening a revoke request shows: a link to the Certificate, the Reason (and an optional Detailed reason), Status, Requested by, Requested at, and Handled at. Approved by appears once revoked; Denied by appears if it was denied. If processing failed, an error banner explains why.

Approving requests

Sign requests

Go to Requests → Sign requests
Click on a pending request
Review the request details
Click Approve or Deny

When approved, the CA signs the request and issues the certificate.

Additional actions available from the web UI:

Cancel: The requester can cancel their own request while the status is Requested
Mark failed: Administrators can mark a request as failed
Retry: Available when the status is Signing (e.g., after a transient error)

CLI:

alpacon csr approve CSR_ID
alpacon csr deny CSR_ID
alpacon csr delete CSR_ID

Revoke requests

Go to Requests → Revoke requests
Click on a pending request
Review the revocation details
Click Approve or Deny

When approved, the certificate is added to the CA’s CRL.

Additional actions available from the web UI:

Cancel: The requester can cancel their own request while the status is Requested
Mark failed: Administrators can mark a request as failed
Retry: Available when the status is Revoking (e.g., after a transient error)

CLI:

alpacon revoke approve REVOCATION_ID
alpacon revoke deny REVOCATION_ID
alpacon revoke cancel REVOCATION_ID

Request statuses

Sign request statuses

Status	Description
Requested	Awaiting administrator approval
Signing	Approved and being signed by the CA
Signed	Certificate has been issued
Denied	Request was rejected by administrator
Canceled	Request was canceled by the requester
Failed	An error occurred during signing

Revoke request statuses

Status	Description
Requested	Awaiting administrator approval
Revoking	Approved and being processed
Revoked	Certificate has been revoked
Denied	Request was rejected by administrator
Canceled	Request was canceled by the requester
Failed	An error occurred during revocation

Retrying failed requests

If a request fails due to a temporary issue, you can retry it from the web UI or CLI. In the web UI, a Retry button appears when the request status is Signing or Revoking.

Sign requests:

alpacon csr retry CSR_ID

Revoke requests:

alpacon revoke retry REVOCATION_ID

Canceling requests

Cancel a pending request before it’s processed. In the web UI, a Cancel button appears for the requester when the request status is Requested.