certmonger-certmaster-submit(8)

1certmonger(8)               System Manager's Manual              certmonger(8)
2
3
4

NAME

6       certmaster-submit
7
8

SYNOPSIS

10       certmaster-submit [-h serverHost] [-c cafile] [-C capath] [csrfile]
11
12

DESCRIPTION

14       certmaster-submit  is the helper which certmonger uses to make requests
15       to certmaster-based CAs.  It is not normally run interactively, but  it
16       can  be  for troubleshooting purposes.  The signing request which is to
17       be submitted should either be in a file whose name is given as an argu‐
18       ment, or fed into certmaster-submit via stdin.
19
20

OPTIONS

22       -h serverHost
23              Submit  the  request  to  the certmaster instance running on the
24              named host.  The default is  localhost:51235  if  a  file  named
25              /var/run/certmaster.pid  is  found  on  the local system, and is
26              read from /etc/certmaster/minion.conf if that file is not found.
27
28       -c cafile
29              Submit the request over HTTPS instead of HTTP,  and  only  trust
30              the  server  if  its certificate was issued by the CA whose cer‐
31              tificate is in the named file.
32
33       -C capath
34              Submit the request over HTTPS instead of HTTP,  and  only  trust
35              the  server if its certificate was issued by a CA whose certifi‐
36              cate is in a file in the named directory.
37
38

EXIT STATUS

40       0      if the certificate was issued. The certificate will be printed.
41
42       1      if the CA is still thinking.  A cookie value will be printed.
43
44       2      if the CA  rejected  the  request.   An  error  message  may  be
45              printed.
46
47       3      if the CA was unreachable.  An error message may be printed.
48
49       4      if critical configuration information is missing.  An error mes‐
50              sage may be printed.
51
52

FILES

54       /var/run/certmaster.pid
55              the certmaster service's PID file.  Its  presence  is  taken  to
56              indicate  that  this system is a CA, and that requests should be
57              submitted to a certmaster server running on the local system.
58
59       /etc/certmaster/minion.conf
60              the certmaster minion configuration file.  If there is no  indi‐
61              cation  that  the local system is a certmaster server, then this
62              file is consulted to determine the location  of  the  certmaster
63              server.
64
65

KNOWN BUGS

67       Checking  for  the existence of certmaster's PID file is a terrible way
68       to figure out whether we're a minion or not.
69
70

BUGS

72       Please  file  tickets  for  any  that  you  find   at   https://fedora‐
73       hosted.org/certmonger/
74
75