[Pki-devel] Using Dogtag REST API

Dinesh Prasanth Moluguwan Krishnamoorthy dmoluguw at redhat.com
Wed Jul 8 19:09:15 UTC 2020


Pascal,

You are sending the parameters via the request's body (which usually is
done in POST). Taking a quick look at the source code [1], seems to me that
you need to pass as GET params.

Example:
   $ curl -k --cert-type P12 --cert ~/ca_admin_cert.p12:Secret.123 https://
<host>:8443/ca/rest/agent/certrequests?requestState=pending&start=15

HTH!

Thanks,
--Dinesh


[1]
https://github.com/dogtagpki/pki/blob/master/base/common/src/com/netscape/certsrv/cert/CertRequestResource.java#L57

On Wed, Jul 8, 2020 at 9:09 AM Pascal Jakobi <pascal.jakobi at gmail.com>
wrote:

> Hi there
>
>
> I created a small python script that just does a "certreqs".
>
> Here is the result :
>
> python3 ./test.py
>
> {"requestState": "pending", "requestType": "any", "start": 5, "pageSize": 0, "maxTime": 100}
>
> Status 200
>
> {'total': 10, 'entries': [
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/1', 'realm': None, 'certId': '0x1', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/1', 'certRequestType': 'pkcs10', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/2', 'realm': None, 'certId': '0x2', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/2', 'certRequestType': 'pkcs10', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/3', 'realm': None, 'certId': '0x3', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/3', 'certRequestType': 'pkcs10', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/4', 'realm': None, 'certId': '0x4', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/4', 'certRequestType': 'pkcs10', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/5', 'realm': None, 'certId': '0x5', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/5', 'certRequestType': 'pkcs10', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/6', 'realm': None, 'certId': '0x6', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/6', 'certRequestType': 'pkcs10', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'pending', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/7', 'realm': None, 'certId': None, 'certURL': None, 'certRequestType': 'keygen', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'pending', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/8', 'realm': None, 'certId': None, 'certURL': None, 'certRequestType': 'keygen', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/9', 'realm': None, 'certId': '0x7', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/7', 'certRequestType': 'keygen', 'operationResult': 'success', 'errorMessage': None},
> {'requestType': 'enrollment', 'requestStatus': 'complete', 'requestURL': 'https://auth.iamts.fr:8443/ca/rest/certrequests/10', 'realm': None, 'certId': '0x8', 'certURL': 'https://auth.iamts.fr:8443/ca/rest/certs/8', 'certRequestType': 'pkcs10', 'operationResult': 'success', 'errorMessage': None}],
> 'Link': []}
>
> [pascal at dell pki_ui]$
>
>
> This raises 2 questions.
> 1/ I requested "pending" cert reqs. But I get also "complete" reqs. Any
> idea why ?
> 2/ I set the start field to 5, but I receive all requests. Again why is
> that ?
>
> Thxs again for your help
>
>
> --
> *Pascal Jakobi* 116 rue de Stalingrad 93100 Montreuil, France
> pascal.jakobi at gmail.com - +33 6 87 47 58 19
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-devel/attachments/20200708/2c4caf84/attachment.htm>


More information about the Pki-devel mailing list