Way to regenerate CRL lists on disc

James Bowes jbowes at redhat.com
Fri Jun 22 12:20:26 UTC 2012


On Fri, Jun 22, 2012 at 01:52:07PM +0200, Lukas Zapletal wrote:
> Hey,
> 
> we want a way to regenerate CRL file(s) that are created on the
> Candlepin side. I was under impression /crl does this, but unfortunately
> it only returns the list in JSON.
> 
> How to do that? If Candlepin does not have this feature, we need to
> request RFE.
>

Yeah, please file an rfe. that /crl url should be working along with the
pinsetter job that generates the crl, but it isn't.

> Until then, I would like to document how to create at least empty
> Candlepin/Pulp compatible CRL list after recovery from backup. How to do
> this? Can I leverage OpenSSL tooling for this?
> 

You should be able to do something like:
openssl ca -gencrl -keyfile <candlepin key file> -cert <matching cert file> \
    -out emptycrl.pem -crldays 90

> Thanks
> 
> -- 
> Later,
> 
>  Lukas "lzap" Zapletal
>  #katello #systemengine
> _______________________________________________
> candlepin mailing list
> candlepin at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/candlepin

-James
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/candlepin/attachments/20120622/488a4373/attachment.sig>


More information about the candlepin mailing list