NAME getcert SYNOPSIS getcert list [options] DESCRIPTION Queries certmonger for a list of certificates which it is monitoring or attempting to obtain. ENROLLMENT OPTIONS
-c NAME List only entries which use the specified CA. The name of the
CA should correspond to one listed by getcert list-cas. LISTING OPTIONS
-r List only entries which are either currently being enrolled or refreshed.
-t List only entries which are not currently being enrolled or refreshed.
-d DIR List only entries which use an NSS database in the specified directory for storing the certificate.
-n NAME List only tracking requests which use an NSS database and the specified nickname for storing the certificate.
-f FILE List only tracking requests which specify that the certificate should be stored in the specified file.
-i NAME List only tracking requests which use this request nickname. STATES NEEDKEYPAIR The service is about to generate a new key pair. GENERATINGKEYPAIR The service is currently generating a new key pair. NEEDKEYGENPERMS The service encountered a filesystem permission error while
attempting to save the newly-generated key pair. NEEDKEYGENPIN The service is missing the PIN which is required to access an
NSS database in order to save the newly-generated key pair, or it has an incorrect PIN for a database. NEEDKEYGENTOKEN The service was unable to find a suitable token to use for gen‐ erating the new key pair. HAVEKEYPAIR The service has successfully generated a new key pair. NEEDKEYINFO The service needs to read information about the key pair. READINGKEYINFO The service is currently reading information about the key pair. NEEDKEYINFOREADPIN The service is missing the PIN which is required to access an
NSS database in order to read information about the newly-gener‐ ated key pair, or it has an incorrect PIN for a database, or has an incorrect password for accessing a key stored in encrypted PEM format. NEEDKEYINFOREADTOKEN The service was unable to find the token in which the key pair is supposed to be stored. HAVEKEYINFO The service has successfully read information about the key pair. NEEDCSR The service is about to generate a new signing request. GENERATINGCSR The service is generating a signing request. NEEDCSRGENPIN The service is missing the PIN which is required to access an NSS database in order to use the key pair, or it has an incor‐ rect PIN for a database, or has an incorrect password for read‐ ing a key stored in encrypted PEM format. NEEDCSRGENTOKEN The service was unable to find the token in which the key pair is supposed to be stored. HAVECSR The service has successfully generated a signing request. NEEDSCEPDATA The service is about to generate data specifically needed for connecting to a CA using SCEP. GENERATINGSCEPDATA The service is generating data specifically needed for connect‐ ing to a CA using SCEP. NEEDSCEPGENPIN The service is missing the PIN which is required to access an NSS database in order to use the key pair, or it has an incor‐ rect PIN for a database, or has an incorrect password for read‐ ing a key stored in encrypted PEM format. NEEDSCEPGENTOKEN The service was unable to find the token in which the key pair is supposed to be stored. NEEDSCEPENCRYPTIONCERT The service is waiting until it can retrieve a copy of the CA's certificate before it can generate data required for connecting to the CA using SCEP. NEEDSCEPRSACLIENTKEY The CA should be contacted using SCEP, but SCEP requires the client key pair to be an RSA key pair, and it is not. HAVESCEPDATA The service has successfully generated data for use in SCEP. NEEDTOSUBMIT The service is about to submit a signing request to a CA for signing. SUBMITTING The service is currently submitting a signing request to a CA for signing. NEEDCA The service can't submit a request to a CA because it doesn't know which CA to use. CAUNREACHABLE The service was unable to contact the CA, but it will try again later. CAUNCONFIGURED The service is missing configuration which will be needed in order to successfully contact the CA. CAREJECTED The CA rejected the signing request. CAWORKING The CA has not yet approved or rejected the request. The ser‐ vice will check on the status of the request later. NEEDTOSAVECERT The CA approved the signing request, and the service is about to save the issued certificate to the location where it has been told to save it. PRESAVECERT
The service is running a configured pre-saving command before
saving the newly-issued certificate to the location where it has been told to save it. STARTSAVINGCERT The service is starting to save the issued certificate to the location where it has been told to save it. SAVINGCERT The service is attempting to save the issued certificate to the location where it has been told to save it. NEEDCERTSAVEPERMS The service encountered a filesystem permission error while
attempting to save the newly-issued certificate to the location where it has been told to save it. NEEDCERTSAVETOKEN
The service is unable to find the token in which the newly- issued certificate is to be stored. NEEDCERTSAVEPIN The service is missing the PIN which is required to access an
NSS database in order to save the newly-issued certificate to the location where it has been told to save it. NEEDTOSAVECACERTS The service is about to save the certificate of the issuing CA to the locations where it has been told to save them. STARTSAVINGCACERTS The service is starting to save the certificate of the issuing CA to the locations where it has been told to save them. SAVINGCACERTS The service is saving the certificate of the issuing CA to the locations where it has been told to save them. NEEDTOSAVEONLYCACERTS The service is about to save the certificate of the issuing CA to the locations where it has been told to save them. STARTSAVINGONLYCACERTS The service is starting to save the certificate of the issuing CA to the locations where it has been told to save them. SAVINGONLYCACERTS The service is saving the certificate of the issuing CA to the locations where it has been told to save them. NEEDCACERTSAVEPERMS NEEDONLYCACERTSAVEPERMS The service encountered a filesys‐ tem permission error while attempting to save the certificate of the issuing CA to the locations where it has been told to save them. NEEDTOREADCERT The service is about to read the issued certificate from the location where it has been told to save it. READINGCERT The service is reading the issued certificate from the location where it has been told to save it. SAVEDCERT The service has finished finished saving the issued certificate and the issuer's certificate to the locations where it has been told to save them. POSTSAVEDCERT
The service is running a configured post-saving command after
saving the newly-issued certificate to the location where it has been told to save them. MONITORING The service is monitoring the certificate and waiting for its
not-valid-after date to approach. This is expected to be the status most often seen. NEEDTONOTIFYVALIDITY The service is about to notify the system administrator that the
certificate's not-valid-after date is approaching. NOTIFYINGVALIDITY The service is notifying the system administrator that the cer‐
tificate's not-valid-after date is approaching. NEEDTONOTIFYREJECTION The service is about to notify the system administrator that the CA rejected the signing request. NOTIFYINGREJECTION The service is notifying the system administrator that the CA rejected the signing request. NEEDTONOTIFYISSUEDSAVEFAILED The service is needs to notify the system administrator that the CA issued a certificate, but that there was a problem saving the certificate to the location where the service was told to save it. NOTIFYINGISSUEDSAVEFAILED The service is is notifying the system administrator that the CA issued a certificate, but that there was a problem saving the certificate to the location where the service was told to save it. NEEDTONOTIFYISSUEDCASAVEFAILED The service is needs to notify the system administrator that the CA issued a certificate, and the issued certificate was saved to the location where the service has been told to save it, but that there was a problem saving the CA's certificate to the locations where the service was told to save it. NOTIFYINGISSUEDCASAVEFAILED The service is notifying the system administrator that the CA issued a certificate, and the issued certificate was saved to the location where the service has been told to save it, but that there was a problem saving the CA's certificate to the locations where the service was told to save it. NEEDTONOTIFYISSUEDSAVED The service is needs to notify the system administrator that the CA issued a certificate and it has been saved to the location where the service has been told to save it. NOTIFYINGISSUEDSAVED The service is notifying the system administrator that the CA issued a certificate and it has been saved to the location where the service has been told to save it. NEEDTONOTIFYONLYCASAVEFAILED The service needs to notify the system administrator that there was a problem saving the CA's certificates to the specified location. NOTIFYINGONLYCASAVEFAILED The service is notifying the system administrator that there was a problem saving the CA's certificates to the specified loca‐ tion. NEEDGUIDANCE An unhandled error was encountered while attempting to contact the CA, or there is the service has just been told to monitor a certificate which does not exist and for which it has no loca‐ tion specified for storing a key pair that could be used to gen‐ erate a signing request to obtain one. NEWLYADDED The service has just been told to track a certificate, or to generate a signing request to obtain one. NEWLYADDEDSTARTREADINGKEYINFO The service has just been told to track a certificate, or to generate a signing request to obtain one, and is about to check if there is already a key pair present. NEWLYADDEDREADINGKEYINFO The service has just been told to track a certificate, or to generate a signing request to obtain one, and is checking if there is already a key pair present. NEWLYADDEDNEEDKEYINFOREADPIN The service has just been told to track a certificate, or to generate a signing request to obtain one, and was unable to check if a key pair was present because it is missing the PIN which is required to access an NSS database, or because it has an incorrect PIN for a database. NEWLYADDEDNEEDKEYINFOREADTOKEN The service has just been told to track a certificate, or to generate a signing request to obtain one, and was unable to check if a key pair was present because the token which should be used for storing the key pair is not present. NEWLYADDEDSTARTREADINGCERT The service has just been told to track a certificate, or to generate a signing request to obtain one, and is about to check if a certificate is already present in the specified location. NEWLYADDEDREADINGCERT The service has just been told to track a certificate, or to generate a signing request to obtain one, and is checking if a certificate is already present in the specified location. NEWLYADDEDDECIDING The service has just been told to track a certificate, or to generate a signing request to obtain one, and is determining its next course of action. BUGS Please file tickets for any that you find at https://fedora‐ hosted.org/certmonger/ SEE ALSO
certmonger(8) getcert(1) getcert-add-ca(1) getcert-add-scep-ca(1)
getcert-list-cas(1) getcert-modify-ca(1) getcert-refresh-ca(1) getcert-
refresh(1) getcert-remove-ca(1) getcert-request(1) getcert-resubmit(1)
getcert-start-tracking(1) getcert-status(1) getcert-stop-tracking(1)
certmonger-certmaster-submit(8) certmonger-dogtag-ipa-renew-agent-sub‐
mit(8) certmonger-dogtag-submit(8) certmonger-ipa-submit(8) certmonger-
local-submit(8) certmonger-scep-submit(8) certmongerselinux(8) certmonger Manual 25 February 2015 certmonger(1)