certmonger

#216 How to check if CA configured properly/completely?
Closed: fixed by ssslll. Opened by ssslll.

Closed: fixed
Reopen Issue

I have an application that makes dbus calls to the certmonger daemon in order to add a scep ca (using add_known_ca dbus method).

Normally everything works out find but in cases when the call is made when the device has no internet, the CA would not be fully configured (even though the call would return successfully).

e.g) "getcert list-cas -c my-ca-nickname" would show the "SCEP CA cert thumbprints" missing.

My question in how can I identify that the CA is not yet fully configured and that before proceeding with a SCEP request, i should wait for the server config to be resolved?

I tried going through the all dbus properties, but I couldn't find anything that I could call and get info if the scep CA is really ready.

Just two mins after posting this, I found out that I can use the "scep-ra-cert" property to check what I need.

When it is unconfigured, "scep-ra-cert" would be empty.
fully configured "scep-ra-cert" would have the cert.

Metadata Update from @ssslll:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.