There is more to the certmonger story. A lot more. After my last attempt I tried to use certmonger:
- as a user-launched process
- to get a user certificate
- direct from the dogtag instance behind FreeIPA
I was not 100% successful, but the attempt did have some positive results.