certmonger-0.78.6-4.fc25.x86_64.rpm


Advertisement

Description

certmonger - Certificate status monitor and PKI enrollment client

Distribution: Fedora 25
Repository: Fedora x86_64
Package name: certmonger
Package version: 0.78.6
Package release: 4.fc25
Package architecture: x86_64
Package type: rpm
Installed size: 2.71 MB
Download size: 611.61 KB
Official Mirror: dl.fedoraproject.org
Certmonger is a service which is primarily concerned with getting your system enrolled with a certificate authority (CA) and keeping it enrolled.

Alternatives

Requires

Provides

  • certmonger = 0.78.6-4.fc25
  • certmonger(x86-64) = 0.78.6-4.fc25
  • config(certmonger) = 0.78.6-4.fc25

Conflicts

  • libtevent < 0.9.13

    Install Howto

    Install the certmonger rpm package:

    # dnf install certmonger

    Files

    • /etc/certmonger/certmonger.conf
    • /etc/dbus-1/system.d/certmonger.conf
    • /usr/bin/certmaster-getcert
    • /usr/bin/getcert
    • /usr/bin/ipa-getcert
    • /usr/bin/local-getcert
    • /usr/bin/selfsign-getcert
    • /usr/lib/systemd/system/certmonger.service
    • /usr/lib/tmpfiles.d/certmonger.conf
    • /usr/libexec/certmonger/certmaster-submit
    • /usr/libexec/certmonger/certmonger-session
    • /usr/libexec/certmonger/dogtag-ipa-renew-agent-submit
    • /usr/libexec/certmonger/dogtag-submit
    • /usr/libexec/certmonger/ipa-submit
    • /usr/libexec/certmonger/local-submit
    • /usr/libexec/certmonger/scep-submit
    • /usr/sbin/certmonger
    • /usr/share/dbus-1/services/certmonger.service
    • /usr/share/dbus-1/system-services/org.fedorahosted.certmonger.service
    • /usr/share/doc/certmonger/LICENSE
    • /usr/share/doc/certmonger/README
    • /usr/share/doc/certmonger/STATUS
    • /usr/share/doc/certmonger/api.txt
    • /usr/share/doc/certmonger/certmaster-submit.txt
    • /usr/share/doc/certmonger/design.txt
    • /usr/share/doc/certmonger/dogtag-notes-2.txt
    • /usr/share/doc/certmonger/dogtag-notes.txt
    • /usr/share/doc/certmonger/fips.txt
    • /usr/share/doc/certmonger/ftw.txt
    • /usr/share/doc/certmonger/getting-started.txt
    • /usr/share/doc/certmonger/gpl-3.0.txt
    • /usr/share/doc/certmonger/helpers.txt
    • /usr/share/doc/certmonger/ipa-submit.txt
    • /usr/share/doc/certmonger/local-signer.txt
    • /usr/share/doc/certmonger/sbexample.txt
    • /usr/share/doc/certmonger/scep.txt
    • /usr/share/doc/certmonger/selinux.txt
    • /usr/share/doc/certmonger/submit.txt
    • /usr/share/locale/ach/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/af/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/af_ZA/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/aln/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/am/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ar/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/as/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ast/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/az/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/bal/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/be/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/bg/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/bn/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/bn_IN/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/bo/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/br/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/brx/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/bs/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ca/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/cs/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/cs_CZ/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/cy/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/da/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/de/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/de_CH/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/dz/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/el/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/en_GB/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/eo/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/es/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/es_ES/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/et/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/eu/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/eu_ES/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/fa/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/fa_IR/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/fi/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/fr/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ga/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/gl/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/gu/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/he/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/hi/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/hr/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/hr_HR/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/hu/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/hy/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ia/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/id/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ilo/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/is/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/it/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/it_IT/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ja/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ja_JP/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ka/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/kk/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/km/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/kn/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ko/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ks/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ku/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ky/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/la/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/lo/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/lt/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/lv/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/mai/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/mg/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/mk/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ml/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/mn/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/mr/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ms/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ms_MY/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/my/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/nb/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/nds/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ne/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/nl/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/nn/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/no/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/nso/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/or/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/pa/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/pl/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/pt/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/pt_BR/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ro/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ru/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ru_RU/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/si/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/sk/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/sl/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/sq/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/sr/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/sr@latin/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/sv/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ta/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ta_IN/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/te/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/tg/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/th/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/tl/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/tr/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/uk/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/uk_UA/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/ur/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/uz/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/vi/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/wo/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/xh/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/zh_CN.GB2312/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/zh_CN/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/zh_HK/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/zh_TW.Big5/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/zh_TW/LC_MESSAGES/certmonger.mo
    • /usr/share/locale/zu/LC_MESSAGES/certmonger.mo
    • /usr/share/man/man1/certmaster-getcert.1.gz
    • /usr/share/man/man1/getcert-add-ca.1.gz
    • /usr/share/man/man1/getcert-add-scep-ca.1.gz
    • /usr/share/man/man1/getcert-list-cas.1.gz
    • /usr/share/man/man1/getcert-list.1.gz
    • /usr/share/man/man1/getcert-modify-ca.1.gz
    • /usr/share/man/man1/getcert-refresh-ca.1.gz
    • /usr/share/man/man1/getcert-refresh.1.gz
    • /usr/share/man/man1/getcert-remove-ca.1.gz
    • /usr/share/man/man1/getcert-request.1.gz
    • /usr/share/man/man1/getcert-resubmit.1.gz
    • /usr/share/man/man1/getcert-start-tracking.1.gz
    • /usr/share/man/man1/getcert-status.1.gz
    • /usr/share/man/man1/getcert-stop-tracking.1.gz
    • /usr/share/man/man1/getcert.1.gz
    • /usr/share/man/man1/ipa-getcert.1.gz
    • /usr/share/man/man1/local-getcert.1.gz
    • /usr/share/man/man1/selfsign-getcert.1.gz
    • /usr/share/man/man5/certmonger.conf.5.gz
    • /usr/share/man/man8/certmonger-certmaster-submit.8.gz
    • /usr/share/man/man8/certmonger-dogtag-ipa-renew-agent-submit.8.gz
    • /usr/share/man/man8/certmonger-dogtag-submit.8.gz
    • /usr/share/man/man8/certmonger-ipa-submit.8.gz
    • /usr/share/man/man8/certmonger-local-submit.8.gz
    • /usr/share/man/man8/certmonger-scep-submit.8.gz
    • /usr/share/man/man8/certmonger.8.gz
    • /var/lib/certmonger/
    • /var/lib/certmonger/cas/
    • /var/lib/certmonger/local/
    • /var/lib/certmonger/requests/
    • /var/run/certmonger/

    Changelog

    2016-07-06 - Nalin Dahyabhai <nalin@redhat.com> 0.78.6-4 - add backported fix to wait a reasonable amount of time after calling the 'resubmit' method for a new certificate to be issued when we're exercising the D-Bus API during tests (Jan Cholasta, #1351052)

    2016-07-06 - Nalin Dahyabhai <nalin@redhat.com> 0.78.6-3 - instead of using killall to send a SIGHUP to the system bus daemon in %post to get it to reload its configuration, use dbus-send to send a ReloadConfig request over the bus (should fix #1277573)

    2016-02-03 - Fedora Release Engineering <releng@fedoraproject.org> - 0.78.6-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

    2016-01-13 - Nalin Dahyabhai <nalin@redhat.com> 0.78.6-1 - document the -R, -N, -o, and -t flags for dogtag-ipa-renew-agent-submit - stop checking that we can generate 512 bit keys during self-tests

    2015-11-12 - Nalin Dahyabhai <nalin@redhat.com> 0.78.5-1 - fix a possible uninitialized memory read (possibly #1260871) - log a diagnostic error when we fail to initialize libkrb5

    2015-08-04 - Nalin Dahyabhai <nalin@redhat.com> 0.78.4-1 - fix the "getcert start-tracking" -L and -l options (#1249753) - output diagnostics about the second request when scep-submit encounters an error during a second request to the SCEP server

    2015-07-20 - Nalin Dahyabhai <nalin@redhat.com> 0.78.3-1 - call poptGetOptArg() correctly, to fix parsing of the -R flag to scep-submit and the -O and -o flags to dogtag-submit (#1244914)

    2015-07-09 - Nalin Dahyabhai <nalin@redhat.com> 0.78.2-1 - tweak initialization so that we set up for providing our D-Bus API before we register our name with the bus, so that we can handle any requests that arrive before the acknowledgement of that registration - on systems that run systemd, add the right data file so that the service gets started when someone tries to talk to the daemon (ticket #38) - correctly check for error responses when sending GetCAChain requests to SCEP servers

    2015-06-21 - Nalin Dahyabhai <nalin@redhat.com> 0.78.1-1 - self-tests: assume that certutil won't generate DSA keys with more than 1024 bits, and will often short us by a few

    2015-06-20 - Nalin Dahyabhai <nalin@redhat.com> 0.78-1 - switch to using popt for parsing command line arguments, continuing to use old help text for now so that we can catch up with translations (print old text for --help, new text (with longopts!) for -H) - add some plumbing for eventually receiving per-certificate roots in addition to issued certificates and chain certificates - add a "rekey" command to getcert, for triggering enrollment using a new key pair (#1087932) - scep-submit: check for the Renewal capability, and default to taking advantage of it during rekeying, unless the new -n flag is specified to it - dogtag-submit: add flags for passing user names, UDNs, passwords, and PINs to the helper (part of ticket #12) - dogtag-submit: add a flag for using the agent creds to do TLS client auth while submitting enrollment requests (more of ticket #12) - dogtag-submit: handle cases where we submit a request and the server returns a success code rather than just queuing the request (#12 again) - ipa-submit: pass requested profile names to the server as an argument named "profile_id"; if the server gives us an "unrecognized argument" error, retry without it for compatibility's sake (part of IPA ticket #57) - keygen: fix a possible crash if keygen fails to return a key from NSS - correct the certmonger(8) man page's description of the -c flag, which it used to call the -C flag - add logic for setting ownership and permissions on certificates and keys when saving them to disk - add configuration options "max_key_lifetime" and "max_key_use_count" for making automatic renewal prefer rekeying

    Advertisement
    Advertisement