CERTMONGER(1)

💖 CERTMONGER 💖

okay bestie, pull up a chair, we're talking about ipa-getcert — it lives in the General Commands Manual section and it's lowkey one of the most useful little tools in the whole certmonger fam. ✨

🌸 NAME 🌸

ipa-getcert — your girl for asking certmonger to do cert things on your behalf 🎀

✨ SYNOPSIS ✨

ipa-getcert request [options]
ipa-getcert resubmit [options]
ipa-getcert start-tracking [options]
ipa-getcert status [options]
ipa-getcert stop-tracking [options]
ipa-getcert list [options]
ipa-getcert list-cas [options]
ipa-getcert refresh-cas [options]

🦋 DESCRIPTION 🦋

So here's the vibe: the ipa-getcert tool issues requests to a org.fedorahosted.certmonger service on behalf of the invoking user. Not on behalf of some rando — on behalf of you, the one who ran the command. 💅

It can do a whole little list of things for you:

• ask the service to begin enrollment, and optionally generate a key pair to use while it's at it 🔑
• ask the service to begin monitoring a certificate in a specified location for expiration, and optionally refresh it when expiration nears 👀
• list the set of certificates that the service is already monitoring
• list the set of CAs that the service is capable of using

If no command is given as the first command-line argument, ipa-getcert will print short usage information for each of its functions. (Translation: you get the menu, not the meal. 🍽️)

Here's the tea though — the ipa-getcert tool behaves identically to the generic getcert tool when it is used with the -c IPA option. Same energy, different name, fr fr. 🫶

Also, certmonger supports retrieving trusted certificates from IPA CAs. So if you wanna know how to use the -F and -a options to specify where those certificates should be stored, go read getcert-request(1) and getcert-resubmit(1). iykyk ✨

💀 BUGS 💀

Found a bug? Please file tickets for any that you find at

https://fedorahosted.org/certmonger/

no cap, they wanna hear about it 🐛

👑 SEE ALSO 👑

the whole friend group, in order:

• certmonger(8)
• getcert(1)
• getcert-add-ca(1)
• getcert-add-scep-ca(1)
• getcert-list-cas(1)
• getcert-list(1)
• getcert-modify-ca(1)
• getcert-refresh-ca(1)
• getcert-refresh(1)
• getcert-rekey(1)
• getcert-remove-ca(1)
• getcert-request(1)
• getcert-resubmit(1)
• getcert-start-tracking(1)
• getcert-status(1)
• getcert-stop-tracking(1)
• certmonger-certmaster-submit(8)
• certmonger-dogtag-ipa-renew-agent-submit(8)
• certmonger-dogtag-submit(8)
• certmonger-ipa-submit(8)
• certmonger-local-submit(8)
• certmonger-scep-submit(8)
• certmonger_selinux(8)

and that's the whole page, bestie!! this one's from the certmonger Manual, dated November 3, 2009, and it's page CERTMONGER(1) in the manual set. iconic behavior tbh, go get those certs 💜✨