IPA 4.7 and earlier have no search parameter to filter out all revoked or expired certificates. The cert-find command has options to search for revoked certs but no option to search for non-revoked certs. For several tasks like cert revokation and use cases like services with short-lived certs, it would be beneficial to only return valid certs.
The feature request is related to #7835. Dogtag may need to get a new search filter, too.
Closing duplicate of https://pagure.io/freeipa/issue/7549.
Metadata Update from @ftweedal: - Issue close_status updated to: duplicate - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.