Certificate Find Process - dogtagpki/freeipa GitHub Wiki
The ipa cert-find is handled by ra.find().
status, _, data = dogtag.https_request(
self.ca_host, 443,
url='/ca/rest/certs/search?size=%d' % (
options.get('sizelimit', 0x7fffffff)),
client_certfile=None,
client_keyfile=None,
cafile=self.ca_cert,
method='POST',
headers={'Accept-Encoding': 'gzip, deflate',
'User-Agent': 'IPA',
'Content-Type': 'application/xml',
'Accept': 'application/xml'},
body=payload
)
The ca_host is obtained from find_providing_servers().