certmonger

#290 getcert list not showing certificate information
Closed: wontfix by ayrtonl. Opened by ayrtonl.

Closed: wontfix
Reopen Issue

Hi

We are running in some troubles with certmonger.
It seems to run fine and monitors and renews the certificate but the getcert list shows some information is missing.
The issuer, subjec, issued, expires are unknown.
Checked with openssl x509 and it all is there, just not showing in getcert.
I suspect I am missing something when doing the request.

Any help would be appreciated :)

I am using the following commands on version: 0.79.20.

getcert request -I testidtech -f /usr/local/ssl/cert/test3.crt -k /usr/local/ssl/cert/test3.key -N "CN=...;OU=" -D dev-scep -L MyOtpPwd

getcert list
Request ID 'test3':
status: MONITORING
stuck: no
key pair storage: type=FILE,location='/usr/local/ssl/cert/test3.key'
certificate: type=FILE,location='/usr/local/ssl/cert/test3.crt'
signing request thumbprint (MD5): D781536D 0CE464DF 9697432A 8307FC3C
signing request thumbprint (SHA1): E2BC5EF4 6E6310C0 D6E2A723 1EED8759 140F897A
CA: scepserver
issuer:
subject:
issued: unknown
expires: unknown
pre-save command:
post-save command: /usr/local/sbin/scep_commit.sh
track: yes
auto-renew: yes

I'm guessing that the cert and key pre-existed before the request was started so it is just acknowledging that the request is tracked for the future.

Thanks for the quick follow-up.
Even when we do a ´getcert rekey´ it shows no issuer, expires or other extra information.
Should it not display that info once it is renewed?

Thanks a lot

Update:
LibNSS was build as debug and caused the issue, closing this one.

Metadata Update from @ayrtonl:
- Issue close_status updated to: wontfix
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.