Sslget; 3.1. Syntax; Usage - Red Hat CERTIFICATE SYSTEM 8 - COMMAND-LINE Manual

Chapter 3.

SSLGet

This tool is similar to the the wget command, which downloads files over HTTP. sslget supports
client authentication using NSS libraries. The configuration wizard uses this utility to retrieve security
domain information from the CA.

3.1. Syntax

The sslget tool has the following syntax:
sslget [ -e profile information ] -n rsa_nickname [[ -p password ] | [ -w passwordFile ]]
[ -d dbdir ] [ -v ] [ -V ] -r url hostname [ :port ]
Option
e
n
p
w
d
v
V
r url
hostname
port

3.2. Usage

It is possible to use sslget to submit information securely to Certificate System subsystems. For
example, to submit a certificate request through a certificate profile enrollment for to a CA, the
command is as follows:
sslget -e "profileId=caInternalAuthServerCert&cert_request_type=pkcs10
&requestor_name=TPS-server.example.com-7889
&cert_request=MIIBGTCBxAIBADBfMSgwJgYDVQQKEx8yMDA2MTEwNngxMi
BTZmJheSBSZWRoYXQgRG9tYWluMRIwEAYDVQQLEwlyaHBraS10cHMxHzAdBgNVBA
MTFndhdGVyLnNmYmF5LnJlZGhhdC5jb20wXDANBgkqhkiG9w0BAQEFAANLADBIAk
EAsMcYjKD2cDJOeKjhuAiyaC0YVh8hUzfcrf7ZJlVyROQx1pQrHiHmBQbcCdQxNz
YK7rxWiR62BPDR4dHtQzj8RwIDAQABoAAwDQYJKoZIhvcNAQEEBQADQQAKpuTYGP
%2BI1k50tjn6enPV6j%2B2lFFjrYNwlYWBe4qYhm3WoA0tIuplNLpzP0vw6ttIMZ
kpE8rcfAeMG10doUpp
&xmlOutput=true&sessionID=-4771521138734965265
&auth_hostname=server.example.com&auth_port=9444"
-d "/var/lib/pki-tps/alias" -p "password123" -v -n "Server-Cert cert-pki-tps" -r "/ca/ee/ca/
profileSubmit" server.example.com:9444
Description
Optional. Submits information through a subsystem form by specifying the form na
used to submit certificate enrollments through a certificate profile.
Gives the CA certificate nickname.
Gives the certificate database password. Not used if the -w option is used.
Optional. Gives the password file path and name. Not used if the -p option is use
Optional. Gives the path to the security databases.
Optional. Sets the operation in verbose mode.
Optional. Gives the version of the sslget tool.
Gives the URL of the site or server from which to download the information. Depe
this can be a machine name, fully-qualified domain name, or IPv4 or IPv6 address
Gives the hostname of the server to which to send the request. Depending on how
a machine name, fully-qualified domain name, or IPv4 or IPv6 address.
Optional. Gives the port number of the server.
13