[Freeipa-devel] Reasons for not using certmonger DBus API

Nalin Dahyabhai nalin at redhat.com
Wed Jul 23 13:45:07 UTC 2014


On Wed, Jul 23, 2014 at 10:12:39AM +0200, Martin Kosek wrote:
> Certmonger API looked complete enough to pull this off:
> https://git.fedorahosted.org/cgit/certmonger.git/tree/doc/api.txt
> 
> If I am wrong, please tell me.

No, it's meant to be complete -- the getcert command only uses the APIs
to talk to the daemon, so they provide at least what it needs.

Two words of caution:
* That file's manually maintained, so it might not completely reflect
  what's available.  The introspection data's generated at runtime, so
  if you poke the service with an introspection request, or using
  d-feet, which does so under the covers, you might spot discrepancies.
  It probably goes without saying, but please report any that you find.
* The majority of properties are currently marked read-only, and you
  currently have to use the 'modify' API request to change them.  Mostly
  this is a result of 'getcert' not having needed anything more than
  that, and properties having been added after the initial versions, so
  it's not set in stone.

HTH,

Nalin




More information about the Freeipa-devel mailing list