Re: [OpenXPKI-users] Periodic Automatic CRL Issuance

[Oliver W. <ma...@ol...>]

Did you remove the "_System" stack from the auth/stack.yaml ? It is
required by the command line tools.


Am 19.05.21 um 20:35 schrieb Nick Dawson:
> I've had this same question and just tried the cli process. I can
> confirm that I get the same result as Scott. 
>
>
>
>
> On Wed, May 19, 2021 at 10:28 AM, Scott Thomas
> <ope...@li...
> <mailto:ope...@li...>> wrote:
>
>     hi,
>
>     >>>hmm it smells like we really forgot to mention this in the docs ;)
>     I can take this as a compliment ;)
>
>     Anyhow, i ran it on the shell to be included in my cron job but it
>     ended like this.
>
>     openxpkicmd --realm democa crl_issuance
>
>     $VAR1 = {
>               'LIST' => [
>                           {
>                             'LABEL' =>
>     'I18N_OPENXPKI_SERVICE_DEFAULT_GET_AUTHENTICATION_STACK_INVALID_AUTH_STACK_REQUESTED',
>                             'PARAMS' => {},
>                             'CLASS' => 'OpenXPKI::Exception'
>                           }
>                         ],
>               'SERVICE_MSG' => 'ERROR'
>             };
>     Unhandled service message. Stopped at /usr/bin/openxpkicmd line 235.
>
>
>
>     On Wednesday, 19 May 2021, 08:57:01 pm GMT+5, Oliver Welter
>     <ma...@ol... <mailto:ma...@ol...>> wrote:
>
>
>     Hi Scott,
>
>     hmm it smells like we really forgot to mention this in the docs ;)
>
>     Just create a cronjob/systemd task to call "openxpkicmd --realm
>     <myrealm> crl_issuance" frequently, the workflow will create a CRL
>     only if its due (expiring or new revocations) so there is no
>     problem to run this more often as you need updates.
>
>     Oliver
>
>     Am 19.05.21 um 17:36 schrieb Scott Thomas via OpenXPKI-users:
>     Bonjour,
>
>     Does OpenXPKI support periodic/automatic CRL issuance by
>     configuring any parameter
>     in /etc/openxpki/config.d/realm.tpl/crl/default.yaml or any other
>     mchanism instead of explicitly publishing from the web interface????
>
>     Regards
>
>
>     _______________________________________________
>     OpenXPKI-users mailing list
>     Ope...@li... <mailto:Ope...@li...>
>     https://lists.sourceforge.net/lists/listinfo/openxpki-users <https://lists.sourceforge.net/lists/listinfo/openxpki-users>
>
>
>     -- 
>     Protect your environment -  close windows and adopt a penguin! 
>
>     _______________________________________________
>     OpenXPKI-users mailing list
>     Ope...@li...
>     <mailto:Ope...@li...>
>     https://lists.sourceforge.net/lists/listinfo/openxpki-users
>     <https://lists.sourceforge.net/lists/listinfo/openxpki-users>
>
>     _______________________________________________
>     OpenXPKI-users mailing list
>     Ope...@li...
>     <mailto:Ope...@li...>
>     https://lists.sourceforge.net/lists/listinfo/openxpki-users
>     <https://lists.sourceforge.net/lists/listinfo/openxpki-users>
>
>
>
>
> _______________________________________________
> OpenXPKI-users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openxpki-users


-- 
Protect your environment -  close windows and adopt a penguin!