On Fri, 22 Feb 2019, Anthony Jarvis-Clark via FreeIPA-users wrote:
I am having some trouble understanding the options to "ipa
that refer to searching for certs not valid after a certain date. I'm
sure I'm just missing something important, but I was hoping someone
could explain them to me.
Use case: I want to list all currently-valid certs that won't be valid
after March 31st, 2019.
I tried "ipa cert-find --validnotafter-to=2019-03-31" but that shows
certs that are currently invalid. I also tried adding
"--revokedon-from=" or "--revokedon-to=" but couldn't find what I
Is there a way to do this with "ipa cert-find" or should I be looking
for a different tool? Should I be piping this into something else
ipa cert-find --validnotafter-to=2019-03-31 --validnotafter-from=2019-02-22
looks reasonable on my system.
Mit freundlichen Gruessen/With best regards,