Is there a way to list all issued certificates in RSA Certificate Manager?
2 years ago
Originally Published: 2008-06-02
Article Number
000066199
Applies To
RSA Product Set: Certificate Manager
RSA Version/Condition: 6.7
Platform: Sun Solaris 2.8
Issue
Is there  a way to list all issued certificates?

Due to the 2008 OpenSSL vulnerability in all Debian and Ubuntu systems, we'd like to be able to go through all of our certificates and separate the weak from the strong, and re-issue where necessary.
http://lists.debian.org/debian-security-announce/2008/msg00152.html
Resolution

You can utilize the Reporting tool and list the pem_x509 which would be the certificate.

Another option is to run a LDAP query to retrieve only valid certs, then try something similar to the following:
 

ldapsearch -x -h CA_HOST -p 389 -P 2 "(&(objectclass=xuda_certificate)(cert_status=1))" pem_x509