[Pki-users] Approve Certificate Request with curl

Marc Sauton msauton at redhat.com
Thu Feb 4 22:38:04 UTC 2021


or use the pki command like tool with the option ca-cert-request-review :
https://github.com/dogtagpki/pki/wiki/Handling-Certificate-Request
for example:
pki -U https://ca1.example.test:8443/ca -d ~/.dogtag/subca1 -C
~/.dogtag/subca1/pwdfile.txt -n caadmin ca-cert-request-review 1011
--action approve

and after successful authentication, the URI is in the form
of /ca/rest/agent/certrequests/xx/approve
where xx is the request id
it is a HTTPS POST operation

Thanks,
M.


On Thu, Feb 4, 2021 at 1:43 AM Perig Bouenou <pseite35 at gmail.com> wrote:

> Hello
>
>
> I'm trying to approve certificate requests by using curl as in
> https://github.com/dogtagpki/pki/wiki/PKI-CA-Approve-Certificate-Request-REST-API
>
> I manage to submit certificate requests by posting an xml request
> template, I can retrieve the list of requests, the curl command for a
> review works fine, but I'm stuck with approval by using curl (I can approve
> CSR with pki tool but I still don't know do the same with curl).
>
> BTW, here is my command for reviewing request:
>
> curl -ks -X GET  --cert-type P12 --cert ca_admin_cert.p12:<password>
> https://dogtag.server:8443/ca/rest/agent/certrequests/08 --header
> "Content-Type:application/xml" |  xmllint --format -
>
>
> Can someone tell me what's the correct curl command to approve cr? or is
> there any example of request approval (with curl) somewhere? or even
> something more detailed than
> https://github.com/dogtagpki/pki/wiki/PKI-CA-Approve-Certificate-Request-REST-API
> ?
>
> PS: I had a look at the JAVA API (
> https://github.com/dogtagpki/pki/wiki/PKI-CA-Java-API#approving-a-certificate-request)
> but it didn't help me so much.
>
> Regards,
> Pier
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20210204/549c8168/attachment.htm>


More information about the Pki-users mailing list