certmonger

#284 Update certmonger to use the IPA-based request, check, approve, retrieve workflow
Opened by rcritten. Modified

Open
Close Issue

certmonger currently communicates directly with the PKI XML API when renewing CA/KRA subsystem certificates.

This code needs to be replaced/augmented to use the IPA JSON API equivalents.

This will allow certmonger to be somewhat more agnostic when it comes to IPA.

A bootstrap is still needed to do the initial IPA CA installation because currently IPA at this point in an installation is not yet configured enough to provide its API.

The ultimate goal of this is to make IPA, and therefore certmonger, independent of the API(s) provided by PKI.

This needs to be paired with https://pagure.io/freeipa/issue/9704 which will provide the approve workflow necessary.

Current progress saved in branch https://pagure.io/fork/rcritten/certmonger/tree/issue_284
Metadata
None
None
None
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.