CERTMONGER(1)
π CERTMONGER(1) β the local-getcert page, bestie edition
okay so this is the manual for local-getcert, living in the General Commands Manual section. yes it's filed under CERTMONGER(1) but the actual name of the thing is local-getcert. close enough, we move β¨
πΈ NAME πΈ
local-getcert β that's the one, that's the girl π
β¨ SYNOPSIS β¨
here's how you summon her, fr fr:
local-getcert request [options]
local-getcert resubmit [options]
local-getcert start-tracking [options]
local-getcert status [options]
local-getcert stop-tracking [options]
local-getcert list [options]
local-getcert list-cas [options]
local-getcert refresh-cas [options]
π¦ DESCRIPTION π¦
so. the local-getcert tool slides into the DMs of a org.fedorahosted.certmonger service, and it does it on behalf of the invoking user. that's the whole vibe: you ask, the service does. π
what can you ask it for? glad you asked, bestie:
- you can ask the service to begin enrollment, and optionally generate a key pair to use while it's at it
- you can ask the service to begin monitoring a certificate at a location you specify, watching for expiration β and optionally refresh it when expiration gets close, like a girl who checks her calendar π
- you can ask it to list the set of certificates the service is already monitoring
- or you can ask it to list the set of CAs the service is capable of using
and if you give it no command at all as the first command-line argument? she'll just print short usage information for each of its functions. helpful queen. π«Ά
ngl, the important bit:local-getcertbehaves identically to the genericgetcerttool when it is used with the-c localoption. same girl, different name tag.
also!! certmonger supports retrieving the list of current and previously-used local CA certificates. if you wanna know how to use the -F and -a options to say where those certificates should be stored, go read getcert-request(1) and getcert-resubmit(1). iykyk π
π BUGS π
found a bug? not me ignoring it π please file tickets for any that you find at:
https://fedorahosted.org/certmonger/
π SEE ALSO π
the whole friend group, in order, no cap:
certmonger(8)getcert(1)getcert-add-ca(1)getcert-add-scep-ca(1)getcert-list-cas(1)getcert-list(1)getcert-modify-ca(1)getcert-refresh-ca(1)getcert-refresh(1)getcert-rekey(1)getcert-remove-ca(1)getcert-request(1)getcert-resubmit(1)getcert-start-tracking(1)getcert-status(1)getcert-stop-tracking(1)certmonger-certmaster-submit(8)certmonger-dogtag-ipa-renew-agent-submit(8)certmonger-dogtag-submit(8)certmonger-ipa-submit(8)certmonger-local-submit(8)certmonger-scep-submit(8)certmonger_selinux(8)
and that's the page!! π this whole thing comes from the certmonger Manual, dated June 7, 2014. iconic date, iconic docs, slay. periodt π β¨
π¦ where this page comes from
- alpine 3.24: certmonger-doc 0.79.21-r0 Β· GPL-3.0-or-later
- centos-stream 10: certmonger 0.79.21-1.el10 Β· GPL-3.0-or-later
- centos-stream 9: certmonger 0.79.21-1.el9 Β· GPLv3+
- debian bookworm: certmonger 0.79.17-2 Β· GPL-3.0-or-later WITH OpenSSL exception
- debian trixie: certmonger 0.79.20-2 Β· GPL-3.0-or-later WITH OpenSSL exception
- fedora 43: certmonger 0.79.20-5.fc43 Β· GPL-3.0-or-later
- fedora 43: certmonger 0.79.21-1.fc43 Β· GPL-3.0-or-later
- fedora 44: certmonger 0.79.21-4.fc44 Β· GPL-3.0-or-later
- opensuse-leap 16.0: certmonger 0.79.19-160000.2.2 Β· GPL-3.0-or-later
- opensuse-leap 16.0: certmonger 0.79.19-160000.2.2 Β· GPL-3.0-or-later
- opensuse-leap 16.0: certmonger 0.79.19-160000.2.2 Β· GPL-3.0-or-later
- opensuse-leap 16.0: certmonger 0.79.19-160000.2.2 Β· GPL-3.0-or-later
- ubuntu jammy: certmonger 0.79.14+git20211010-2ubuntu1 Β· GPL-3.0-or-later WITH OpenSSL exception
- ubuntu noble: certmonger 0.79.19-1build4 Β· GPL-3.0-or-later WITH OpenSSL exception
- ubuntu questing: certmonger 0.79.20-2build1
- ubuntu resolute: certmonger 0.79.21-1 Β· GPL-3.0-or-later WITH OpenSSL exception
- ubuntu stonking: certmonger 0.79.21-1build1 Β· GPL-3.0-or-later WITH OpenSSL exception
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms