PKI CA Certificate Request CLI - dogtagpki/pki GitHub Wiki
The commands to view or process certificate requests must be executed as an agent.
This command requires agent authentication:
$ pki -n caadmin ca-cert-request-find ----------------- 2 entries matched ----------------- Request ID: 1 Type: enrollment Request Status: complete Operation Result: success Certificate ID: 0x1 Request ID: 2 Type: enrollment Request Status: complete Operation Result: success Certificate ID: 0x2 ---------------------------- Number of entries returned 2 ----------------------------
This command does not require authentication:
$ pki ca-cert-request-profile-show <profile> --output <filename>
To review a certificate request:
$ pki <agent authentication> ca-cert-request-review <request ID> --file <filename>
It will store the certificate request in the output file and wait for an action. The file should be reviewed manually and may be edited if necessary.
Then enter one of the following actions to complete the review:
-
approve
-
reject
-
cancel
-
update
-
validate
-
assign
-
unassign
Alternatively, the approval process can be done in a single step:
$ pki <agent authentication> ca-cert-request-review <request ID> --action approve
$ pki ca-cert-request-show <request ID>