25.5. Starting and stopping certificate tracking

Procedure

• To disable the monitoring of a certificate with the Request ID of 20190408143846:

  # getcert stop-tracking -i 20190408143846

  For more options, see the getcert stop-tracking man page on your system.

• To enable the monitoring of a certificate stored in the /tmp/some_cert.crt file, whose private key is stored in the /tmp/some_key.key file:

  # getcert start-tracking -c IPA -f /tmp/some_cert.crt -k /tmp/some_key.key

  Certmonger cannot automatically identify the CA type that issued the certificate. For this reason, add the -c option with the IPA value to the getcert start-tracking command if the certificate was issued by the IdM CA. Omitting to add the -c option results in certmonger entering the NEED_CA state.

  For more options, see the getcert start-tracking man page on your system.

  注意

  The two commands do not manipulate the certificate. For example, getcert stop-tracking does not delete the certificate or remove it from the NSS database or from the filesystem but simply removes the certificate from the list of monitored certificates. Similarly, getcert start-tracking only adds a certificate to the list of monitored certificates.