lol lol via FreeIPA-users wrote:
I was able to get the certificates via getcert list. Most of them are in MONITORING mode and expire in september. And I have a feeling that they will fail to renew because of the API issue. Do you have any suggestions?
What you're seeing is the view from certmonger which has a copy of the certificates. It does not contact the CA to obtain the status.
Yes, you'll want to work out your CA issue prior to expiration.
rob