NAME¶

certmaster-getcert

SYNOPSIS¶

certmaster-getcert request [options]
certmaster-getcert resubmit [options]
certmaster-getcert start-tracking [options]
certmaster-getcert status [options]
certmaster-getcert stop-tracking [options]
certmaster-getcert list [options]
certmaster-getcert list-cas [options]
certmaster-getcert refresh-cas [options]

DESCRIPTION¶

The certmaster-getcert tool issues requests to a org.fedorahosted.certmonger service on behalf of the invoking user. It can ask the service to begin enrollment, optionally generating a key pair to use, it can ask the service to begin monitoring a certificate in a specified location for expiration, and optionally to refresh it when expiration nears, it can list the set of certificates that the service is already monitoring, or it can list the set of CAs that the service is capable of using.

If no command is given as the first command-line argument, certmaster-getcert will print short usage information for each of its functions.

The certmaster-getcert tool behaves identically to the generic getcert tool when it is used with the -c certmaster option.

There is no standard authenticated method for obtaining the root certificate from certmaster CAs, so certmonger does not support retrieving trust information from them. While the -F and -a options will still be recognized, they will effectively be ignored.

BUGS¶

Please file tickets for any that you find at https://fedorahosted.org/certmonger/

SEE ALSO¶

certmonger(8) getcert(1) getcert-add-ca(1) getcert-add-scep-ca(1) getcert-list-cas(1) getcert-list(1) getcert-modify-ca(1) getcert-refresh-ca(1) getcert-refresh(1) getcert-rekey(1) getcert-remove-ca(1) getcert-request(1) getcert-resubmit(1) getcert-start-tracking(1) getcert-status(1) getcert-stop-tracking(1) certmonger-certmaster-submit(8) certmonger-dogtag-ipa-renew-agent-submit(8) certmonger-dogtag-submit(8) certmonger-ipa-submit(8) certmonger-local-submit(8) certmonger-scep-submit(8) certmonger_selinux(8)