OnWorks favicon

ipa-cacert-manage - Online in the Cloud

Run ipa-cacert-manage in OnWorks free hosting provider over Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator

This is the command ipa-cacert-manage that can be run in the OnWorks free hosting provider using one of our multiple free online workstations such as Ubuntu Online, Fedora Online, Windows online emulator or MAC OS online emulator



ipa-cacert-manage - Manage CA certificates in IPA


ipa-cacert-manage [OPTIONS...] COMMAND


ipa-cacert-manage can be used to manage CA certificates in IPA.


renew - Renew the IPA CA certificate

This command can be used to manually renew CA certificate of the IPA CA.

When the IPA CA is the root CA (the default), it is not usually necessary to
manually renew the CA certificate, as it will be renewed automatically when it is
about to expire, but you can do so if you wish.

When the IPA CA is subordinate of an external CA, the renewal process involves
submitting a CSR to the external CA and installing the newly issued certificate in
IPA, which cannot be done automatically. It is necessary to manually renew the CA
certificate in this setup.

When the IPA CA is not configured, this command is not available.

- Install a CA certificate

This command can be used to install new CA certificate to IPA.


The Directory Manager password to use for authentication.

Sign the renewed certificate by itself.

Sign the renewed certificate by external CA.

File containing the IPA CA certificate and the external CA certificate chain. The
file is accepted in PEM and DER certificate and PKCS#7 certificate chain formats.
This option may be used multiple times.

-n NICKNAME, --nickname=NICKNAME
Nickname for the certificate.

-t TRUST_FLAGS, --trust-flags=TRUST_FLAGS
Trust flags for the certificate in certutil format. Trust flags are of the form
"X,Y,Z" where X is for SSL, Y is for S/MIME, and Z is for code signing. Use ",,"
for no explicit trust.

The supported trust flags are:

C - CA trusted to issue server certificates

T - CA trusted to issue client certificates

p - not trusted

-v, --verbose
Print debugging information.

-q, --quiet
Output only errors.

Log to the given file.


0 if the command was successful

1 if an error occurred

Use ipa-cacert-manage online using onworks.net services

Free Servers & Workstations

Download Windows & Linux apps

  • 1
    OfficeFloor provides inversion of
    coupling control, with its: - dependency
    injection - continuation injection -
    thread injection For more information
    visit the...
    Download OfficeFloor
  • 2
    DivKit is an open source Server-Driven
    UI (SDUI) framework. It allows you to
    roll out server-sourced updates to
    different app versions. Also, it can be
    used fo...
    Download DivKit
  • 3
    Utility to convert between various
    subscription format. Shadowrocket users
    should use ss, ssr or v2ray as target.
    You can add &remark= to
    Telegram-liked HT...
    Download subconverter
  • 4
    SWASH is a general-purpose numerical
    tool for simulating unsteady,
    non-hydrostatic, free-surface,
    rotational flow and transport phenomena
    in coastal waters as ...
    Download SWASH
  • 5
    VBA-M (Archived - Now on Github)
    VBA-M (Archived - Now on Github)
    Project has moved to
    Features:Cheat creationsave statesmulti
    system, supports gba, gbc, gb, sgb,
    Download VBA-M (Archived - Now on Github)
  • 6
    Linux System Optimizer and Monitoring
    Github Repository:
    Audience: End Users/Desktop. User
    interface: Qt. Programming La...
    Download Stacer
  • More »

Linux commands