This step is defined in DogtagInstance.configure_certmonger_renewal_helpers().

It creates new CA types for certmonger that will retrieve updated certificates from the Dogtag master server:

• dogtag-ipa-ca-renew-agent

  • Command: dogtag-ipa-ca-renew-agent-submit

• dogtag-ipa-ca-renew-agent-reuse

  • Command: dogtag-ipa-ca-renew-agent-submit --reuse-existing

• dogtag-ipa-ca-renew-agent-selfsigned

  • Command: dogtag-ipa-ca-renew-agent-submit --force-self-signed

The dogtag-ipa-ca-renew-agent-submit defines the following handlers:

• request_cert()

• request_and_store_cert()

• retrieve_cert_continuous()

• renew_ca_cert()

• org.fedorahosted.certmonger.add_known_ca()