Way to regenerate CRL lists on disc
James Bowes
jbowes at redhat.com
Fri Jun 22 12:20:26 UTC 2012
On Fri, Jun 22, 2012 at 01:52:07PM +0200, Lukas Zapletal wrote:
> Hey,
>
> we want a way to regenerate CRL file(s) that are created on the
> Candlepin side. I was under impression /crl does this, but unfortunately
> it only returns the list in JSON.
>
> How to do that? If Candlepin does not have this feature, we need to
> request RFE.
>
Yeah, please file an rfe. that /crl url should be working along with the
pinsetter job that generates the crl, but it isn't.
> Until then, I would like to document how to create at least empty
> Candlepin/Pulp compatible CRL list after recovery from backup. How to do
> this? Can I leverage OpenSSL tooling for this?
>
You should be able to do something like:
openssl ca -gencrl -keyfile <candlepin key file> -cert <matching cert file> \
-out emptycrl.pem -crldays 90
> Thanks
>
> --
> Later,
>
> Lukas "lzap" Zapletal
> #katello #systemengine
> _______________________________________________
> candlepin mailing list
> candlepin at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/candlepin
-James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/candlepin/attachments/20120622/488a4373/attachment.sig>
More information about the candlepin
mailing list