Method: Export Key¶

Description¶

This endpoint exports (un-wraps) the named key and returns the plaintext of the encryption key. If version is specified, the specific version will be returned.

Note

The key must be set to allow_export to support this operation.

Note

This endpoint requires Admin permission in the affected vault.

URL Syntax¶

/api/{version}/transparent/export/:vaultid/:name(/:key_version)

HTTP Method¶

GET

Successful HTTP Response¶

200

Parameters¶

Parameter name	Description	Parameter type	Type	Mandatory	Comment
X-Http-Token	StoredSafe token	HTTP Header	String	¹⁾	Preferred method
token	StoredSafe token	JSON-encoded	String	¹⁾	Legacy method
vaultid	Vault-ID	URL-encoded	String	Yes
key_version	Key version	URL-encoded	Integer

Note

¹⁾ One of the methods is required.

Response Attributes¶

Attribute	Description	Type
CALLINFO.errorcodes	Number of errors	Integer
CALLINFO.errors	Number of errors	Integer
CALLINFO.general	Information	Array
CALLINFO.handler	Handler used	String
CALLINFO.status	SUCCESS or FAIL	String
CALLINFO.token	Rotated StoredSafe token ¹⁾	String
KEYS	Keys	Array
KEYS.name	Key name	String
KEYS.key_version	Key version	String
KEYS.type	Key type	String
DATA	Supplied data in prior API-call	String
HEADERS.(headers)	HTTP Headers	String
PARAMS	Route parameters (empty)	Array
ERRORCODES	Error code and text ²⁾	Object
ERRORS	Error code and text ²⁾	Array

Note

¹⁾ Token to be used in subsequent calls

²) Only present if errors

Examples¶

Export the named key my-new-key from the vault (vault-id) 179.

Request

GET /api/1.0/transparent/export/179/my-new-key
x-http-token: your_storedsafe_token

Response

HTTP/2 201
Content-type: application/json; charset=UTF-8
{
    "CALLINFO": {
        "errorcodes": 0,
        "errors": 0,
        "general": [],
        "handler": "EncryptionHandler",
        "status": "SUCCESS",
        "token": "rotated_storedsafe_token"
    },
    "KEYS": {
        {
            "name": "my-new-key",
            "keys": {
                 "1": "63vYMld6YLxGXkkH5VJKD4yPQkXuBPcvIvVaFs4pIvU=",
                 "2": "f/jKeqC8qNLMMyMXJEpxkx6rVpGBAbgW/1Njpzud55o="
            }
        },
    },
    "DATA": {
        "name": "my-new-key",
        "token": "your_storedsafe_token",
    },
    "HEADERS": {
        "Accept": "*/*",
        "Content-Length": "169",
        "Content-Type": "application/json",
        "Host": "safe.domain.cc",
        "User-Agent": "curl/7.64.1",
        "X-Http-Token": "your_storedsafe_token"
    },
    "PARAMS": []
}