Bug 1303173

Summary: RFE: Improvements to RenewalNotificationJob
Product: Red Hat Enterprise Linux 7 Reporter: Matthew Harmsen <mharmsen>
Component: pki-coreAssignee: Christina Fu <cfu>
Status: CLOSED UPSTREAM QA Contact: Asha Akkiangady <aakkiang>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.3CC: arubin, batkisso, hgraham, nkinder
Target Milestone: rcKeywords: FutureFeature
Target Release: 7.4   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-04-17 00:34:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Matthew Harmsen 2016-01-29 18:41:11 UTC 
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/pki/ticket/1635

CS should have a configurable setting to notify users that a certificate is about to expire.  The notification period should be defined by the CS admin to notify the user X seconds before a certificate expires.  The email address users input when requesting certificate should be used for these notifications.  Finally, these advanced notifications should be enabled/disabled on a per-profile basis.

Use case:

1) I obtain a user certificate via CLI or GUI.  90 days before that certificate expires I would receive a notification with a URL to go renew that certificate.

2) I generate a CSR and request a server certificate.  Since this will be used in production, the email address I use is a team alias. 90 days before the certificate expires, the team alias email address receives a notification to renew the cert.
Comment 2 Matthew Harmsen 2016-04-20 22:17:18 UTC 
Per CS Bug/Ticket Triage held 04/19/2016:  RHEL 7.4
Comment 5 hgraham 2017-10-17 16:22:09 UTC 
Is this not already available?

11.1.2.1. certRenewalNotifier (RenewalNotificationJob)
https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/9/html/Administration_Guide/Automated_Jobs.html#Types_of_Automated_Jobs

https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/9/html/Administration_Guide/Setting_up_Specific_Jobs.html#Configuration_Parameters_of_certRenewalNotifier
Comment 6 Matthew Harmsen 2018-04-17 00:34:54 UTC 
Per RHEL 7.5.z/7.6/8.0 Triage:

cfu: close RHEL bug CLOSED UPSTREAM, keep upstream ticket in FUTURE