This update teaches the certmonger daemon to optionally set up a dedicated listening socket, allowing it to accept requests directly from clients when the message bus service is not running. It corrects ordering so that post-save hooks for a certificate are run after the certificate's CA certificates are saved, in cases where the daemon is told to save them. When submitting requests to IPA servers, the client will now consult the IPA directory server for a list of CAs if the default can not be reached, and will use DNS-based service location to locate a directory server if the default can not be reached. A new helper (dogtag-submit) is available for communicating with generic Dogtag servers.