CERTMONGER(1)

✨ NAME ✨

getcert — bestie, this is the certmonger(1) corner of the manual, and we're forcing certmonger to go check on stuff right now 💅

🦋 SYNOPSIS 🦋

getcert refresh [options]

💖 DESCRIPTION 💖

okay so, this literally forces certmonger to immediately go check on the status of an enrollment request. which requests? the ones where it either couldn't reach the CA at all, or the ones where it's just sitting there waiting on the CA like 👀. no cap, it's the "hey. hey bestie. go look again" command.

🎀 SPECIFYING REQUESTS BY NICKNAME 🎀

• -i NAME, --id=NAME — check on the status of the signing request that has this nickname. If you don't pass this option, and a tracking entry that matches the certificate storage options you did specify already exists, then that entry gets used instead. And if you still haven't specified anything? then you gotta point at where the certificate lives, either with a combo of -d and -n, or with -f. iykyk 🌸

👑 SPECIFYINGIDIR,E--dbdir=DIRIFICATE LOCATION 👑

(this heading is iconic and we are NOT touching it, it's part of the lore 🙈)

• -d — the certificate lives in the NSS database in the directory you specify.
• -n NAME, --nickname=NAME — the certificate in the NSS database named with -d has this nickname. only valid alongside -d, fr fr.
• -t TOKEN, --token=TOKEN — if the NSS database has more than one token available, the certificate is stored in this token. lowkey you will almost never need to pass this. only valid with -d.
• -f FILE, --certfile=FILE — the certificate is stored in the named file. simple as that 💜

🌈 OPTIONS 🌈

• -a, --all — refresh the info about all requests where the service is gonna need to try contacting the CA again. every single one. slay.

💀 BUGS 💀

found a bug? 😭 please file tickets for anything you find right here:

https://fedorahosted.org/certmonger/

🫶 SEE ALSO 🫶

certmonger(8) getcert(1) getcert-add-ca(1) getcert-add-scep-ca(1) getcert-list-cas(1) getcert-list(1) getcert-modify-ca(1) getcert-refresh-ca(1) getcert-rekey(1) getcert-remove-ca(1) getcert-request(1) getcert-resubmit(1) getcert-start-tracking(1) getcert-status(1) getcert-stop-tracking(1) certmonger-certmaster-submit(8) certmonger-dogtag-ipa-renew-agent-submit(8) certmonger-dogtag-submit(8) certmonger-ipa-submit(8) certmonger-local-submit(8) certmonger-scep-submit(8) certmonger_selinux(8)

and that's the whole page bestie 💅 this one came from the certmonger Manual, dated July 24, 2014, and it lives under CERTMONGER(1). go forth and refresh, periodt ✨🎀