File: dogtag-notes-2.txt

package info (click to toggle)
certmonger 0.75.14-3
  • links: PTS, VCS
  • area: main
  • in suites: jessie, jessie-kfreebsd
  • size: 8,540 kB
  • ctags: 2,176
  • sloc: ansic: 41,340; sh: 9,551; makefile: 528; python: 207; xml: 190; sed: 16
file content (31 lines) | stat: -rw-r--r-- 1,496 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
Okay, I've worked out some of the logic and which servlets we need to call.

* Submit the client request.[[BR]]
 * if (enrolling-a-new-certificate):[[BR]]
   submit via HTTP to ''/ca/ee/ca/profileSubmit'':[[BR]]
   profileId=''profile''[[BR]]
   cert_request_type=''pkcs10''[[BR]]
   cert_request=''base64''[[BR]]
 * if (renewing-an-already-issued-certificate):[[BR]]
   submit via HTTP to ''/ca/ee/ca/profileSubmit'':[[BR]]
   renewal=true[[BR]]
   serial_num=''decimal serial number''[[BR]]
   profileId=''profile''[[BR]]
* Maybe approve the request ourselves.[[BR]]
 * if (we're-an-agent):[[BR]]
   read default values via authenticated HTTPS to ''/ca/agent/ca/profileReview''[[BR]]
   requestId=''decimal''[[BR]]
   (pick up all ''defId'' and ''defVal'' values with ''defConstraint'' NOT ''readonly''; if ''defSyntax'' is ''choice'' and ''defVal'' is not set, use the first item in the comma-separated ''defConstraint'' list)[[BR]]
   issue via authenticated HTTPS to ''/ca/agent/ca/profileProcess''[[BR]]
   requestId=''decimal''[[BR]]
   op=approve[[BR]]
   (all ''defId'' and ''defVal'' values as key/value pairs)[[BR]]
   requestNotes=''free-form text''[[BR]]
* Check that the certificate was issued.[[BR]]
 * HTTP to ''/ca/ee/ca/checkRequest''[[BR]]
   requestId=''decimal request ID''[[BR]]
   importCert=true[[BR]]
* Retrieve the new certificate.[[BR]]
 * if (certificate-is-ready):[[BR]]
   HTTP to ''/ca/ee/ca/displayCertFromRequest''[[BR]]
   requestId=''decimal request ID''[[BR]]