Testing CA Performance

Certificate Enrollment

Export the CA signing certificate:

$ pki-server cert-export ca_signing --cert-file ca_signing.crt

Install the CA signing certificate:

$ cp ca_signing.crt /etc/pki/ca-trust/source/anchors
$ update-ca-trust

Export the CA admin’s certificate and key into a PEM file:

$ openssl pkcs12 \
    -in $HOME/.dogtag/pki-tomcat/ca_admin_cert.p12 \
    -passin file:$HOME/.dogtag/pki-tomcat/ca/pkcs12_password.conf \
    -out caadmin.pem \
    -nodes

To run certificate enrollment test:

$ python tests/dogtag/pytest-ansible/pytest/performance_test/test_cert_enrollment.py \
    --hostname $HOSTNAME \
    --port 8443 \
    --client-cert caadmin.pem \
    --number-of-clients 1 \
    --number-of-tests-per-client 1