certmaster−sync −− syncronize client certificates with Func.
certmaster-sync [−f|−−force]
certmaster-sync syncronizes client certificates amongst certmaster clients via Func. It is assumed that the hosts who have requested certificates are reachable via Func for syncronization operations.
certmaster-sync by default is called as a post-sign and post-clean trigger. In order to enable syncronization you must set sync_certs to True, see CONFIGURATION VALUES below.
The syncronization occurs by querying remote Func methods in certmastermod on the minion hosts. This will gather information, copy any new certificates, and remove any certificates that have been cleaned.
−f, −−force
Override the configuration value for sync_certs in /etc/certmaster/certmaster.conf
sync_certs
sync_certs determines whether or not the script will actually syncronize or if it will exit with no operation. You can use −f|−−force to override this configuration value. (Default: False)
See https://fedorahosted.org/certmaster. It’s a Wiki. See also https://fedorahosted.org/func
John Eckersberg <jeckersb AT redhat DOT com>