getcert - Man Page

Synopsis

getcert request [options] getcert start-tracking [options] getcert stop-tracking [options] getcert resubmit [options] getcert rekey [options] getcert refresh [options] getcert list [options] getcert status [options] getcert add-ca [options] getcert add-scep-ca [options] getcert list-cas [options] getcert modify-ca [options] getcert refresh-ca [options] getcert remove-ca [options]

Description

The getcert tool issues requests to a org.fedorahosted.certmonger service on behalf of the invoking user. It can ask the service to begin enrollment, optionally generating a key pair to use, it can ask the service to begin monitoring a certificate in a specified location for expiration, and optionally to refresh it when expiration nears, it can list the set of certificates that the service is already monitoring, or it can list the set of CAs that the service is capable of using.

If no command is given as the first command-line argument, getcert will print short usage information for each of its functions.

If getcert is invoked by a user with UID 0, and there is no system bus available, getcert will attempt to launch a temporary copy of the certmonger daemon to handle its requests.

Common Arguments

If CERTMONGER_PVT_ADDRESS is set in the environment, getcert contacts the service directly at the specified location. All commands can take either the -s or -S arguments, which instruct getcert to contact the org.fedorahosted.certmonger service on the session or system bus, if no value is set. By default, getcert consults the org.fedorahosted.certmonger service attached to the system bus.

Exit Status

The exit status is 0 on success, nonzero on error.

0 Success

1 Error

2 Duplicate entry

Bugs

Please file tickets for any that you find at https://fedorahosted.org/certmonger/