Man page - certmonger(8)

Packages contains this manual

Package: certmonger
apt-get install certmonger

Manuals in package:

Documentations in package:

certmonger

Manual

CERTMONGER

NAME
SYNOPSIS
DESCRIPTION
OPTIONS
FILES
BUGS
SEE ALSO

NAME

certmonger

SYNOPSIS

certmonger [-s|-S] [-L|-l] [-P PATH] [-b TIMEOUT|-B] [-n|-f] [-d LEVEL] [-p FILE] [-F] [-c command] [-v]

DESCRIPTION

The certmonger daemon monitors certificates for impending expiration, and can optionally refresh soon-to-be-expired certificates with the help of a CA. If told to, it can drive the entire enrollment process from key generation through enrollment and refresh.

The daemon provides a control interface via the org.fedorahosted.certmonger service, with which client tools such as getcert (1) interact.

OPTIONS

-s , --session

Listen on the session bus rather than the system bus.

-S , --system

Listen on the system bus rather than the session bus. This is the default.

-l , --listening-socket

Also listen on a private socket for connections from clients running under the same UID.

-L , --only-listening-socket

Listen only on a private socket for connections from clients running under the same UID, and skip connecting to a bus.

-P PATH , --listening-socket-path = PATH

Specify a location for the private listening socket. If the location beings with a ’/’ character, it will be prefixed with ’unix:path=’, otherwise it will be prefixed with ’unix:’. If this option is not specified, the listening socket, if one is created, will be placed in the abstract namespace.

-b TIMEOUT , --bus-activation-timeout = TIMEOUT

Behave as a bus-activated service: if there are no certificates to be monitored or obtained, and no requests are received within TIMEOUT seconds, exit. Not compatible with the -c option.

-B , --no-bus-activation-timeout

Don’t behave as a bus-activated service. This is the default.

-n , --nofork

Don’t fork, and log messages to stderr rather than syslog.

-f , --fork

Do fork, and log messages to syslog rather than stderr. This is the default.

-d LEVEL , --debug-level = LEVEL

Set debugging level. Higher values produce more debugging output. Implies -n.

-p FILE , pidfile = FILE

Store the daemon’s process ID in the named file.

-F , --fips

Force NSS to be initialized in FIPS mode. The default behavior is to heed the setting stored in /proc/sys/crypto/fips_enabled .

-c COMMAND , --command = COMMAND

After the service has initialized, run the specified command, then shut down the service after the command exits. If the -l or -L option was also specified, the command will be run with the CERTMONGER_PVT_ADDRESS environment variable set to the listening socket’s location. Not compatible with the -b option.

-v , --version

Print version information and exit.

FILES

The set of certificates being monitored or signed is tracked using files stored under /var/lib/certmonger/requests , or in a directory named by the CERTMONGER_REQUESTS_DIR environment variable.

The set of known CAs is tracked using files stored under /var/lib/certmonger/cas , or in a directory named by the CERTMONGER_CAS_DIR environment variable.

Temporary files will be stored in " /run/certmonger ", or in the directory named by the CERTMONGER_TMPDIR environment variable if that value was not given at compile time.

BUGS

Please file tickets for any that you find at https://fedorahosted.org/certmonger/