Pull requests - certmonger

certmonger

Pull Requests
5 Open 119 Merged Closed

#303 Transition to NEED_GUIDANCE on certread subprocess failure

master 0

Opened Feb 13, 2026 by mrd000. Modified Mar 10, 2026

#301 Experimental support for Post Quantum keys

master 0

Opened Jan 12, 2026 by rcritten. Modified Mar 9, 2026

#300 Initialize UID/PID when using a private listening socket

master 0

Opened Oct 7, 2025 by rcritten. Modified Mar 9, 2026

#268 Translations update from Fedora Weblate

master 0

Opened Jan 8, 2024 by weblatebot. Modified Mar 9, 2026

#74 Provide option to specify the EC curve, add EC default key size

master 0

Opened Apr 13, 2017 by rcritten. Modified Mar 9, 2026

#304 Spec file: create /var/lib/certmonger/ with systemdtmpfiles

master 0

Merged Mar 9, 2026. Opened Mar 9, 2026 by frenaud.

#299 Temporarily stop testing the c (valid ca) flag due to NSS bug

master 0

Merged Oct 1, 2025. Opened Oct 1, 2025 by rcritten.

#296 express payload type via an enum

master 0

Merged Sep 5, 2025. Opened Sep 5, 2025 by rcritten.

#291 Update README.md

master 0

Merged Jun 2, 2025. Opened Jun 2, 2025 by tscherf.

#288 Add some missing test files to dist

master 0

Merged Feb 6, 2025. Opened Feb 6, 2025 by ftweedal.

#287 Add the ability to request certificates completely via the IPA API

master 0

Merged Sep 5, 2025. Opened Jan 7, 2025 by rcritten.

#280 Move shell_escape function to util.c

master 0

Merged May 28, 2024. Opened May 10, 2024 by santeri3700.

#279 Add more environment variables to be passed on to the notification command

master 0

Merged Jun 10, 2024. Opened May 5, 2024 by santeri3700.

#277 Use correct object path for 'ca' property of request objects in D-Bus API

master 0

Merged Mar 15, 2024. Opened Mar 15, 2024 by yrro.

#273 getcert: add NULL check to duplicate string compare

master 0

Merged Jan 30, 2024. Opened Jan 30, 2024 by rcritten.

#270 getcert: return 2 when trying to create a duplicate entry

master 0

Merged Jan 29, 2024. Opened Jan 22, 2024 by rcritten.

#267 Translations update from Fedora Weblate

master 0

Merged Jan 5, 2024. Opened Jan 5, 2024 by weblatebot.

#265 Fixes for GCC 14 compatibility

master 0

Merged Jan 2, 2024. Opened Dec 22, 2023 by fweimer.

#264 Update tests to be compatible with OpenSSL 3.2

master 0

Merged Dec 13, 2023. Opened Dec 13, 2023 by ohollmann.

#263 Solving merge conflict in translations in Weblate

master 0

Merged Sep 28, 2023. Opened Sep 16, 2023 by rffontenelle.

#262 getcert: add-scep-ca: fix help for --ca-cert and --ra-cert

master 0

Merged Aug 4, 2023. Opened Aug 4, 2023 by kenyon.

#261 Don't restrict tokens to CKM_RSA_X_509

master 0

Merged May 1, 2023. Opened Apr 6, 2023 by rcritten.

#259 Add new certs to internal token, try harder to remove on renewal

master 0

Merged Apr 4, 2023. Opened Mar 20, 2023 by rcritten.

#257 Don't require an NSS database in cm_certread_n_parse

master 0

Merged Apr 4, 2023. Opened Feb 28, 2023 by rcritten.

#255 migrated to SPDX license

master 0

Merged Feb 23, 2023. Opened Feb 23, 2023 by rcritten.

#254 Add missing .TP tags in getcert-request man page

master 0

Merged Feb 23, 2023. Opened Jan 25, 2023 by rcritten.

#253 Include owner and perms in getcert list output

master 0

Merged Mar 23, 2023. Opened Jan 25, 2023 by rcritten.

#252 Rename DBus service and conf files to match canonical name

master 0

Merged Dec 6, 2022. Opened Dec 6, 2022 by rcritten.

#250 Revert "Translated using Weblate (Russian)"

master 0

Merged Nov 30, 2022. Opened Nov 30, 2022 by rcritten.

#247 Respect LDFLAGS settings defined by user

master 0

Merged Oct 19, 2022. Opened Oct 17, 2022 by winterheart.

#246 Switch to CA user when saving NSS certificates

master 0

Merged Nov 30, 2022. Opened Sep 27, 2022 by rcritten.

#245 Fix usage of PKCS#7 ASN1 attribute retrieval for SCEP keygen

master 0

Merged Aug 23, 2022. Opened Aug 16, 2022 by rcritten.

#242 Require jansson >= 2.12

master 0

Merged Jun 7, 2022. Opened Jun 7, 2022 by rcritten.

#240 Testing CI

master 0

Merged Apr 8, 2022. Opened Apr 8, 2022 by rcritten.

#238 Disable DSA in the RPM spec

master 0

Merged Apr 7, 2022. Opened Apr 7, 2022 by rcritten.

#237 Translations update from Fedora Weblate

master 0

Merged Nov 30, 2022. Opened Mar 29, 2022 by weblatebot.

#236 Replace DER-encoded test file with a base64-encoded one

master 0

Merged Mar 18, 2022. Opened Mar 17, 2022 by rcritten.

#235 Remove dependency on SHA-1

master 0

Merged Mar 18, 2022. Opened Mar 17, 2022 by rcritten.

#234 tests: Test that the CA constraint DER encoding is correct

master 0

Merged Mar 29, 2022. Opened Feb 7, 2022 by rcritten.

#232 Verify that the AES-128 is used for encrypting the local CA

master 0

Merged Jan 6, 2022. Opened Nov 29, 2021 by rcritten.

#231 Don't include "NEW" in certificate signing requests

master 0

Merged Jan 6, 2022. Opened Nov 15, 2021 by rcritten.

#230 Reject a certificate with an empty NSS nickname

master 0

Merged Nov 11, 2021. Opened Nov 11, 2021 by rcritten.

#229 Add a PEM validity checker and validate SCEP CA files

master 0

Merged Jan 6, 2022. Opened Nov 4, 2021 by rcritten.

#226 Update csrgen test to understand OpenSSL 3.0.0 output

master 0

Merged Oct 5, 2021. Opened Oct 5, 2021 by rcritten.

#225 Add .gitignore to project

master 0

Merged Nov 4, 2021. Opened Oct 5, 2021 by cheimes.

#224 Don't encode critical=FALSE in X509v3 extensions

master 0

Merged Oct 5, 2021. Opened Oct 4, 2021 by cheimes.

#222 Add compile check for EVP_PKEY_get_id along with EVP_PKEY_id

master 0

Merged Sep 28, 2021. Opened Sep 28, 2021 by rcritten.

#221 Translations update from Weblate

master 0

Merged Mar 28, 2022. Opened Sep 14, 2021 by weblatebot.

#220 Translations update from Weblate

master 0

Merged Sep 13, 2021. Opened Aug 26, 2021 by weblatebot.

#219 Translations update from Weblate

master 0

Merged Aug 20, 2021. Opened Aug 15, 2021 by weblatebot.

#218 Fix file descriptor leak when executing CA helpers

master 0

Merged Sep 3, 2021. Opened Aug 12, 2021 by rcritten.

#215 Translations update from Weblate

master 0

Merged Aug 6, 2021. Opened Aug 6, 2021 by rcritten.

#214 Add SCEP config option to treat the challenge password as an OTP

master 0

Merged Aug 6, 2021. Opened Jul 14, 2021 by rcritten.

#212 Make the default RSA key size configurable

master 0

Merged Aug 6, 2021. Opened Jun 22, 2021 by rcritten.

#209 Translations update from Weblate

master 0

Merged Jun 15, 2021. Opened Jun 15, 2021 by weblatebot.

#208 COPR CI Integration

master 0

Merged Jun 8, 2021. Opened Jun 8, 2021 by rcritten.

#207 If an existing cert exists, use it to decrypt the PKCS#7 envelope

master 0

Merged Aug 6, 2021. Opened Jun 7, 2021 by rcritten.

#206 Fix list of sub-commands in the getcert man page

master 0

Merged Jun 4, 2021. Opened Jun 4, 2021 by rcritten.

#204 Translations update from Weblate

master 0

Merged Jun 3, 2021. Opened Jun 3, 2021 by weblatebot.

#201 Display not_before in getcert output

master 0

Merged May 14, 2021. Opened May 14, 2021 by rcritten.

#200 clang, coverity and compiler warning fixes

master 0

Merged May 14, 2021. Opened May 13, 2021 by rcritten.

#199 Translations update from Weblate

master 0

Merged Apr 28, 2021. Opened Apr 20, 2021 by weblatebot.

#198 Fix local CA to work under FIPS

master 0

Merged Apr 15, 2021. Opened Apr 14, 2021 by vakwetu.

#194 Pass /etc/ipa/ca.crt if it exists to libcurl, else rely on system

master 0

Merged May 14, 2021. Opened Feb 18, 2021 by rcritten.

#193 Use the system env and not the session env for the local CA

master 0

Merged Jun 4, 2021. Opened Feb 17, 2021 by rcritten.

#192 Add NULL checks before string compares when analyzing a cert

master 0

Merged May 14, 2021. Opened Feb 17, 2021 by rcritten.

#190 Drop hardcoded values for Apache NSS db for IPA < v4

master 0

Merged May 14, 2021. Opened Feb 16, 2021 by rcritten.

#186 If calling a CA helper fails, call cm_casave_done to reap

master 0

Merged Feb 16, 2021. Opened Jan 12, 2021 by rcritten.

#173 Use PK11_FindCertFromNickname to find certificates instead of looping over the list of slots

master 0

Merged Oct 20, 2020. Opened Oct 20, 2020 by rcritten.

#172 Save a copy of the IPA error message when parsing the JSON result

master 0

Merged Oct 20, 2020. Opened Oct 13, 2020 by rcritten.

#171 Fix NSS shutdown issues when obtaining the internal token name

master 0

Merged Oct 20, 2020. Opened Oct 9, 2020 by rcritten.

#170 Don't report a spurious error if no SCEP pkiMessage is ready yet

master 0

Merged Oct 20, 2020. Opened Oct 6, 2020 by rcritten.

#169 remove dead make targets

master 0

Merged Sep 16, 2020. Opened Sep 16, 2020 by ftweedal.

#168 Don't send SIGKILL to children, give them a chance to die

master 0

Merged Sep 8, 2020. Opened Aug 25, 2020 by rcritten.

#167 Use JSON-RPC for the IPA CA and deprecate XMLRPC in all clients

master 0

Merged Sep 18, 2020. Opened Aug 24, 2020 by rcritten.

#165 Handle dbus restart better

master 0

Merged Aug 25, 2020. Opened Jul 30, 2020 by rcritten.

#164 Don't free soptions while it is still needed

master 0

Merged Jul 6, 2020. Opened Jul 6, 2020 by rcritten.

#162 Revert part of 7d65601f4238e65078592b3486e47ad564f00134

master 0

Merged Jun 30, 2020. Opened Jun 30, 2020 by rcritten.

#160 Change linkage for cm_submit_u_from_file test in fromfile.c

master 0

Merged Jun 26, 2020. Opened Jun 26, 2020 by rcritten.

#159 Make it possible to run NSS db type specific tests separately

master 0

Merged Jun 25, 2020. Opened Jun 24, 2020 by rcritten.

#158 Address issues discovered by clang and coverity

master 0

Merged Jun 25, 2020. Opened Jun 22, 2020 by rcritten.

#157 dogtag: use POST for profileProcess requests

master 0

Merged Jun 23, 2020. Opened Jun 18, 2020 by ftweedal.

#154 configure: Fix detection of supported NSS db type

master 0

Merged Jun 9, 2020. Opened Jun 9, 2020 by slev.

#152 Include &message=CA-IDENT with GetCACaps and GetCACert requests

master 0

Merged Jun 2, 2020. Opened Jun 1, 2020 by rcritten.

#151 Add long options to help and man pages

master 0

Merged May 14, 2020. Opened May 8, 2020 by rcritten.

#150 Adapt to the new behavior of disconnect in dbus-broker

master 0

Merged May 8, 2020. Opened May 5, 2020 by rcritten.

#149 Ensure that files read in have a trailing new-line

master 0

Merged May 1, 2020. Opened May 1, 2020 by rcritten.

#148 template_profile, issuer and MS certificat template are single-value

master 0

Merged Apr 24, 2020. Opened Apr 24, 2020 by rcritten.

#147 Add new option to allow overriding the detected SCEP CA chain

master 0

Merged Apr 23, 2020. Opened Apr 17, 2020 by rcritten.

#146 Re-order the way the SCEP signing and CA certs are collected

master 0

Merged Apr 17, 2020. Opened Apr 15, 2020 by rcritten.

#145 Fix logging issues in the scep-submit helper

master 0

Merged Apr 17, 2020. Opened Feb 28, 2020 by rcritten.

#142 Remove empty translation files

master 0

Merged Sep 9, 2020. Opened Jan 15, 2020 by rcritten.

#140 Convert tests to use python3

master 0

Merged Nov 8, 2019. Opened Nov 7, 2019 by rcritten.

#136 Try to pull the entire CA chain from IPA

master 0

Merged Oct 16, 2019. Opened Oct 16, 2019 by rcritten.

#134 Don't close STDOUT when calling the CA fetch_roots function

master 0

Merged Oct 10, 2019. Opened Oct 10, 2019 by rcritten.

#131 Fix re-key after importing existing private key

master 0

Merged Sep 6, 2019. Opened Sep 5, 2019 by rcritten.

#130 Optimize closing open file descriptors

master 0

Merged Sep 6, 2019. Opened Sep 5, 2019 by rcritten.

#129 Pass the CA identifier to the SCEP submit helper

master 0

Merged Sep 6, 2019. Opened Sep 3, 2019 by rcritten.

#128 Allow principal to be set during start-tracking

master 0

Merged Sep 3, 2019. Opened Sep 3, 2019 by rcritten.

#126 Fix handling of NSS tokens

master 0

Merged Sep 6, 2019. Opened Aug 28, 2019 by rcritten.

#123 Sync nodsa expectations in dbus tests

master 0

Merged Aug 28, 2019. Opened Aug 14, 2019 by slev.

#119 Document key/cert file owner and mode options

master 0

Merged Jul 26, 2019. Opened May 20, 2019 by rcritten.

#118 Display profile, MS template and requested issuer if available

master 0

Merged Jul 17, 2019. Opened May 20, 2019 by rcritten.

#115 Change /var/run -> /run in systemd service file

master 0

Merged May 20, 2019. Opened May 8, 2019 by orion.

#108 Handle escape characters in a subject (now with test)

master 0

Merged Feb 14, 2019. Opened Feb 11, 2019 by ftweedal.

#106 Improve documentation around multiple values for subjectAltName

master 0

Merged Nov 7, 2018. Opened Nov 7, 2018 by rcritten.

#104 Improve NSS token handling

master 0

Merged Oct 1, 2018. Opened Sep 5, 2018 by rcritten.

#100 Allow leading/trailing data when looking for certificates

master 0

Merged Mar 14, 2018. Opened Mar 13, 2018 by rcritten.

#98 Allow configuration of client SCEP algorithms

master 0

Merged Apr 16, 2018. Opened Feb 22, 2018 by tvaughan.

#96 Remove trailing CR/LF when reading passwords from a file.

master 0

Merged Feb 22, 2018. Opened Feb 21, 2018 by rcritten.

#95 Keep LC_*, LANG, set default LC_CTYPE

master 0

Merged Feb 22, 2018. Opened Feb 21, 2018 by cheimes.

#92 Address issues discovered when Fedora 28 switch default dbtype from dbm to sql

master 0

Merged Feb 23, 2018. Opened Jan 23, 2018 by rcritten.

#87 SPEC: Fix building on rawhide

master 0

Merged Jan 11, 2018. Opened Jan 3, 2018 by lslebodn.

#83 Clarify default wait period.

master 0

Merged Jan 2, 2018. Opened Sep 22, 2017 by erinn.

#81 Implement support for MS V2 template extension

master 0

Merged Aug 30, 2017. Opened Aug 18, 2017 by ftweedal.

#80 getcert start-tracking: use issuer option when specified

master 0

Merged Aug 23, 2017. Opened Aug 18, 2017 by ftweedal.

#79 Add missing test input to dist

master 0

Merged Aug 22, 2017. Opened Aug 18, 2017 by ftweedal.

#77 Reformat certificates returned by Dogtag

master 0

Merged Aug 16, 2017. Opened Aug 15, 2017 by nalin.

#75 Fix minor memory leak

master 0

Merged Jun 13, 2017. Opened Jun 13, 2017 by dkupka.

#70 Fix a couple of typos in configure messages, disable maintainer mode by default

master 0