lb pki-issued

The lb pki-issued command manages the ledger of the certificates created with the internal CA. Every internal creation opens a row here; the automatic renewal runs over this row. Its panel equivalent is the internally created certificates on the SSL/TLS Certificates screen.

The record is born not with this command but with issue-internal

The certificate creation is done with the lb certificate issue-internal command; the ledger row is opened at that moment. The renewal is done with renew-internal.

Command Summary

TR7 WEB-CLI · lb pki-issued

# Tab after the command

admin@TR7LBWAF01> lb pki-issued

add delete list show update

 

admin@TR7LBWAF01> lb pki-issued list # list all of them

admin@TR7LBWAF01> lb pki-issued show <id> # show one

admin@TR7LBWAF01> lb pki-issued update id <id> … # change

admin@TR7LBWAF01> lb pki-issued delete <id> # remove from the ledger

admin@TR7LBWAF01>  

Fields

Field	Status	What it does	What is written after it
--san.N	Optional	Carries the additional names that the certificate covers	A domain name or an address; each with its own index

The remaining information of the ledger row (which CA, which profile, which certificate, the validity period) is written during the creation and is not changed in this command.

Example

TR7 WEB-CLI · the internal creation ledger

# the certificate is created first

admin@TR7LBWAF01> lb certificate issue-internal name internal-service caId <intermediate-ca> profileId <profile> cn servis.kurum.local

 

# the ledger rows and the renewal

admin@TR7LBWAF01> lb pki-issued list

admin@TR7LBWAF01> lb pki-issued update id <id> --san.0 servis2.kurum.local

admin@TR7LBWAF01> lb certificate renew-internal certId <certificate>

admin@TR7LBWAF01>  

Things to Know

• The ledger row carries on the renewal. The automatic renewal of a certificate created internally is tracked over this record.
• If the row is deleted, the renewal tracking ends as well. The certificate itself is in the lb certificate collection; removing it from the ledger does not delete it but stops its automatic renewal.
• The renewal is done in place. renew-internal creates a new key and a new serial, updates the bound record and disables the old ledger row.