The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
This issue was migrated from Pagure Issue #594. Originally filed by edewata (@edewata) on 2013-04-24 21:41:22:
Assigned to nobody
Currently the tools use different default certificate databases:
pkispawn: ~/.pki///alias
console: ~/.dogtag-idm-console or ~/.redhat-idm-console
CLI: ~/.pki/nssdb (to be changed to ~/.dogtag/nssdb)
So to use the tools the user would have to export/import the certificates manually or use additional parameters to specify the database location. To streamline the operation it would be better to use a shared database, but there are some issues:
The current database doesn't support concurrent access. A database migration may be required.
The above tools need to be able to handle conflicting certificates.
A new tool may be needed to merge existing databases.
This issue was migrated from Pagure Issue #594. Originally filed by edewata (@edewata) on 2013-04-24 21:41:22:
Currently the tools use different default certificate databases:
So to use the tools the user would have to export/import the certificates manually or use additional parameters to specify the database location. To streamline the operation it would be better to use a shared database, but there are some issues: