How To Install dogtag-pki-kra on Fedora 36

In this tutorial we learn how to install dogtag-pki-kra in Fedora 36. dogtag-pki-kra is Dogtag PKI KRA Package

Introduction

In this tutorial we learn how to install dogtag-pki-kra on Fedora 36.

What is dogtag-pki-kra

Dogtag PKI Key Recovery Authority (KRA) is an optional subsystem that can act as a key archival facility. When configured in conjunction with the Certificate Authority (CA), the KRA stores private encryption keys as part of the certificate enrollment process. The key archival mechanism is triggered when a user enrolls in the PKI and creates the certificate request. Using the Certificate Request Message Format (CRMF) request format, a request is generated for the user’s private encryption key. This key is then stored in the KRA which is configured to store keys in an encrypted format that can only be decrypted by several agents requesting the key at one time, providing for protection of the public encryption keys for the users in the PKI deployment. Note that the KRA archives encryption keys; it does NOT archive signing keys, since such archival would undermine non-repudiation properties of signing keys.

We can use yum or dnf to install dogtag-pki-kra on Fedora 36. In this tutorial we discuss both methods but you only need to choose one of method to install dogtag-pki-kra.

Install dogtag-pki-kra on Fedora 36 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

After updating yum database, We can install dogtag-pki-kra using dnf by running the following command:

sudo dnf -y install dogtag-pki-kra

Install dogtag-pki-kra on Fedora 36 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

After updating yum database, We can install dogtag-pki-kra using yum by running the following command:

sudo yum -y install dogtag-pki-kra

How To Uninstall dogtag-pki-kra on Fedora 36

To uninstall only the dogtag-pki-kra package we can use the following command:

sudo dnf remove dogtag-pki-kra

dogtag-pki-kra Package Contents on Fedora 36

/usr/share/java/pki/pki-kra.jar
/usr/share/licenses/dogtag-pki-kra
/usr/share/licenses/dogtag-pki-kra/LICENSE
/usr/share/pki/kra
/usr/share/pki/kra/conf
/usr/share/pki/kra/conf/CS.cfg
/usr/share/pki/kra/conf/Catalina
/usr/share/pki/kra/conf/Catalina/localhost
/usr/share/pki/kra/conf/Catalina/localhost/kra.xml
/usr/share/pki/kra/conf/acl.ldif
/usr/share/pki/kra/conf/acl.properties
/usr/share/pki/kra/conf/auth-method.properties
/usr/share/pki/kra/conf/db.ldif
/usr/share/pki/kra/conf/index.ldif
/usr/share/pki/kra/conf/indextasks.ldif
/usr/share/pki/kra/conf/uriworkermap.properties
/usr/share/pki/kra/conf/vlv.ldif
/usr/share/pki/kra/conf/vlvtasks.ldif
/usr/share/pki/kra/setup
/usr/share/pki/kra/setup/registry_instance
/usr/share/pki/kra/webapps
/usr/share/pki/kra/webapps/ROOT
/usr/share/pki/kra/webapps/ROOT/WEB-INF
/usr/share/pki/kra/webapps/ROOT/WEB-INF/web.xml
/usr/share/pki/kra/webapps/ROOT/index.jsp
/usr/share/pki/kra/webapps/kra
/usr/share/pki/kra/webapps/kra/404.html
/usr/share/pki/kra/webapps/kra/500.html
/usr/share/pki/kra/webapps/kra/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/WEB-INF
/usr/share/pki/kra/webapps/kra/WEB-INF/classes
/usr/share/pki/kra/webapps/kra/WEB-INF/classes/logging.properties
/usr/share/pki/kra/webapps/kra/WEB-INF/lib
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-certsrv.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cms.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-cmsbundle.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/pki-kra.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-api.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/lib/slf4j-jdk14.jar
/usr/share/pki/kra/webapps/kra/WEB-INF/web.xml
/usr/share/pki/kra/webapps/kra/admin
/usr/share/pki/kra/webapps/kra/admin/console
/usr/share/pki/kra/webapps/kra/agent
/usr/share/pki/kra/webapps/kra/agent/GenError.template
/usr/share/pki/kra/webapps/kra/agent/GenPending.template
/usr/share/pki/kra/webapps/kra/agent/GenRejected.template
/usr/share/pki/kra/webapps/kra/agent/GenSuccess.template
/usr/share/pki/kra/webapps/kra/agent/GenSvcPending.template
/usr/share/pki/kra/webapps/kra/agent/GenUnauthorized.template
/usr/share/pki/kra/webapps/kra/agent/GenUnexpectedError.template
/usr/share/pki/kra/webapps/kra/agent/cms-funcs.js
/usr/share/pki/kra/webapps/kra/agent/funcs.js
/usr/share/pki/kra/webapps/kra/agent/header.template
/usr/share/pki/kra/webapps/kra/agent/helpfun.js
/usr/share/pki/kra/webapps/kra/agent/index.jsp
/usr/share/pki/kra/webapps/kra/agent/index.template
/usr/share/pki/kra/webapps/kra/agent/kra
/usr/share/pki/kra/webapps/kra/agent/kra/GrantRecovery.html
/usr/share/pki/kra/webapps/kra/agent/kra/ListRequests.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/SrchRecoverKey.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/confirmRecoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerial2.template
/usr/share/pki/kra/webapps/kra/agent/kra/displayBySerialForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/examineRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/finishRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/frameGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/frameStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/getApprovalStatus.template
/usr/share/pki/kra/webapps/kra/agent/kra/getStats.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantAsyncRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/grantRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/index.jsp
/usr/share/pki/kra/webapps/kra/agent/kra/menuCheck.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuGrant.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRecover.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuRequest.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuSearch.html
/usr/share/pki/kra/webapps/kra/agent/kra/menuStats.html
/usr/share/pki/kra/webapps/kra/agent/kra/monitor.template
/usr/share/pki/kra/webapps/kra/agent/kra/processReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/queryReq.template
/usr/share/pki/kra/webapps/kra/agent/kra/recoverBySerial.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKey.template
/usr/share/pki/kra/webapps/kra/agent/kra/srchKeyForRecovery.template
/usr/share/pki/kra/webapps/kra/agent/kra/top.html
/usr/share/pki/kra/webapps/kra/index.jsp
/usr/share/pki/kra/webapps/kra/js
/usr/share/pki/kra/webapps/kra/js/key.js
/usr/share/pki/kra/webapps/kra/js/keyrequest.js
/usr/share/pki/kra/webapps/kra/services.template
/usr/share/pki/kra/webapps/kra/ui
/usr/share/pki/kra/webapps/kra/ui/home.html
/usr/share/pki/kra/webapps/kra/ui/index.jsp
/usr/share/pki/kra/webapps/kra/ui/key.html
/usr/share/pki/kra/webapps/kra/ui/keyrequest.html
/usr/share/pki/kra/webapps/kra/ui/keyrequests.html
/usr/share/pki/kra/webapps/kra/ui/keys.html

References

Summary

In this tutorial we learn how to install dogtag-pki-kra on Fedora 36 using yum and [dnf]((/fedora/36/dnf/).