pki-server-ocsp(8)

📦
version 11.9.0 · 3 versions
, in fedora 43, fedora 44

💖 pki-server-ocsp — the manual, but make it cute 💖

okay so bestie, this is the section 8 page for the pki-server-ocsp command from the PKI OCSP Management Commands family, and no cap, it's literally your whole command-line glow-up for managing PKI OCSP. let's get into it 💅

✨ NAME ✨

pki-server-ocsp — Command-line interface for managing PKI OCSP.

🦋 SYNOPSIS 🦋

pki-server [CLI-options] ocsp-clone-prepare [command-options]
pki-server [CLI-options] ocsp-audit-event-find [command-options]
pki-server [CLI-options] ocsp-audit-event-enable [command-options]
event-ID
pki-server [CLI-options] ocsp-audit-event-modify [command-options]
event-ID
pki-server [CLI-options] ocsp-audit-event-disable [command-options]
event-ID
pki-server [CLI-options] ocsp-audit-file-find [command-options]
pki-server [CLI-options] ocsp-audit-file-verify [command-options]

yes queen, that's the whole lineup, all of it, we love a full menu 🫶

🌸 DESCRIPTION 🌸

The pki-server ocsp commands provide command-line interfaces to manage PKI OCSP. it's giving "I do everything and I do it well", fr fr.

  • pki-server [CLI-options] ocsp [command-options] — this one's just here to list all the available PKI OCSP management commands for you. like a lil menu at the restaurant, lowkey iconic.
  • pki-server [CLI-options] ocsp-clone-prepare [command-options] — this command exports OCSP subsystem certificates into a PKCS #12 file, private keys and all. yes bestie, private keys, it's a whole bundle 💅
  • pki-server [CLI-options] ocsp-audit-event-find [command-options] — this one lists all the audit events, both the enabled ones and the disabled ones. everyone gets an invite to the list.
  • pki-server [CLI-options] ocsp-audit-event-enable [command-options] event-ID — this command will enable audit events in the OCSP. turn the lights on bestie ✨
  • pki-server [CLI-options] ocsp-audit-event-disable [command-options] event-ID — this command will disable audit events in the OCSP. lights off, nap time 😴
  • pki-server [CLI-options] ocsp-audit-event-modify [command-options] event-ID — this command will modify the event filter for audit events. glow-up for the filter, periodt.
  • pki-server [CLI-options] ocsp-audit-file-find [command-options] — this command lists the audit log files that the OCSP generated. look at all the receipts 🧾
  • pki-server [CLI-options] ocsp-audit-file-verify [command-options] — this command will verify whether the signatures in the audit log files are valid. vibe check on the signatures, honestly.

🔥 AUDIT EVENTS 🔥

okay this is the big list and yes we're keeping every single one of them, no skipping, the way that I would NEVER leave an event out 💖

🌈 Logging audit events

  • AUDIT_LOG_STARTUP
  • AUDIT_LOG_SHUTDOWN
  • AUDIT_LOG_DELETE
  • LOG_PATH_CHANGE
  • LOG_EXPIRATION_CHANGE
  • CONFIG_SIGNED_AUDIT

🔐 Authentication and authorization audit events

  • AUTHZ
  • AUTH
  • ROLE_ASSUME
  • CONFIG_AUTH
  • CONFIG_ROLE
  • ACCESS_SESSION_ESTABLISH
  • ACCESS_SESSION_TERMINATED

🗝️ Key audit events

  • PRIVATE_KEY_ARCHIVE_REQUEST
  • PRIVATE_KEY_ARCHIVE_REQUEST_PROCESSED
  • PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_SUCCESS
  • CONFIG_TRUSTED_PUBLIC_KEY
  • PRIVATE_KEY_EXPORT_REQUEST_PROCESSED_FAILURE
  • KEY_RECOVERY_REQUEST
  • KEY_RECOVERY_REQUEST_ASYNC
  • KEY_RECOVERY_AGENT_LOGIN
  • KEY_RECOVERY_REQUEST_PROCESSED
  • KEY_RECOVERY_REQUEST_PROCESSED_ASYNC
  • KEY_GEN_ASYMMETRIC
  • COMPUTE_SESSION_KEY_REQUEST_PROCESSED_SUCCESS
  • COMPUTE_SESSION_KEY_REQUEST
  • COMPUTE_SESSION_KEY_REQUEST_PROCESSED_FAILURE
  • DIVERSIFY_KEY_REQUEST
  • DIVERSIFY_KEY_REQUEST_PROCESSED_SUCCESS
  • DIVERSIFY_KEY_REQUEST_PROCESSED_FAILURE
  • SERVER_SIDE_KEYGEN_REQUEST
  • SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_SUCCESS
  • SERVER_SIDE_KEYGEN_REQUEST_PROCESSED_FAILURE

📜 CMC audit events

  • CMC_RESPONSE_SENT
  • CMC_ID_POP_LINK_WITNESS
  • CMC_SIGNED_REQUEST_SIG_VERIFY
  • CMC_PROOF_OF_IDENTIFICATION
  • CMC_REQUEST_RECEIVED
  • CMC_USER_SIGNED_REQUEST_SIG_VERIFY
  • PROOF_OF_POSSESSION

🎀 Profile audit events

  • CONFIG_CERT_PROFILE
  • CONFIG_CRL_PROFILE
  • CONFIG_OCSP_PROFILE

📄 Certificate audit events

  • CERT_SIGNING_INFO
  • CERT_PROFILE_APPROVAL
  • CERT_REQUEST_PROCESSED
  • CERT_STATUS_CHANGE_REQUEST
  • CERT_STATUS_CHANGE_REQUEST_PROCESSED
  • CONFIG_CERT_POLICY
  • PROFILE_CERT_REQUEST
  • CIMC_CERT_VERIFICATION
  • NON_PROFILE_CERT_REQUEST

🚪 ACL audit events

  • CONFIG_ACL

🌟 OCSP audit events

  • OCSP_SIGNING_INFO
  • OCSP_GENERATION

🧾 CRL audit events

  • SCHEDULE_CRL_GENERATION
  • DELTA_CRL_PUBLISHING
  • CRL_VALIDATION
  • CRL_RETRIEVAL
  • CRL_SIGNING_INFO
  • FULL_CRL_GENERATION
  • DELTA_CRL_GENERATION

👑 Authority audit events

  • AUTHORITY_CONFIG
  • SECURITY_DOMAIN_UPDATE
  • CONFIG_DRM

✅ Selftest audit events

  • SELFTESTS_EXECUTION

🔒 Encryption data audit events

  • CONFIG_ENCRYPTION
  • ENCRYPT_DATA_REQUEST
  • ENCRYPT_DATA_REQUEST_PROCESSED_SUCCESS
  • ENCRYPT_DATA_REQUEST_PROCESSED_FAILURE
  • COMPUTE_RANDOM_DATA_REQUEST
  • COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_FAILURE
  • COMPUTE_RANDOM_DATA_REQUEST_PROCESSED_SUCCESS
  • SECURITY_DATA_ARCHIVAL_REQUEST

🎲 Serial/random number audit event

  • INTER_BOUNDARY
  • CONFIG_SERIAL_NUMBER
  • RANDOM_GENERATION

slay, you made it through the entire list, I'm so proud of you 🥹

🫶 SEE ALSO 🫶

  • pki-server(8) — PKI server management commands (the parent command, the main character, if you will)

💜 AUTHORS 💜

Amol Kahat <akahat@redhat.com>. thank you for your service king 👑

Copyright (c) 2018 Red Hat, Inc. This is licensed under the GNU General Public License, version 2 (GPLv2). A copy of this license is available at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.

and that's the whole page bestie, no notes 💅 this was PKI, dated Mar 21, 2018 — yeah she's a 2018 girlie but she still ate, fr fr. mwah, go manage some OCSP 🎀✨

📦 where this page comes from