Anthony Jarvis-Clark via FreeIPA-users wrote:
Hello Everyone,
I am having some trouble understanding the options to "ipa cert-find"
that refer to searching for certs not valid after a certain date. I'm
sure I'm just missing something important, but I was hoping someone
could explain them to me.
Use case: I want to list all currently-valid certs that won't be valid
after March 31st, 2019.
I tried "ipa cert-find --validnotafter-to=2019-03-31" but that shows
certs that are currently invalid. I also tried adding
"--revokedon-from=" or "--revokedon-to=" but couldn't find what I
was
looking for.
Is there a way to do this with "ipa cert-find" or should I be looking
for a different tool? Should I be piping this into something else instead?
Depending on release you can try the pki tool but you may find it has
similar capabilities.
We are a bit limited by the search options of the CA REST API. There are
some open issues on this upstream.
rob