Am 03.09.24 um 17:16 schrieb Romina Roshani via OpenXPKI-users:
I have a question regarding the downloading of the CRL.
I am usually downloading the CRL and then load it in mbedTLS for a task. I was
wondering if there is perhaps a command that I can use for automatically
downloading the CRL so that I can automate my process without using the web
interface.
I already saw the command for issuing the CRL in issue:
https://sourceforge.net/p/openxpki/mailman/openxpki-users/thread/[email protected]/
<https://sourceforge.net/p/openxpki/mailman/openxpki-users/thread/[email protected]/>
However, when I tried the command it was successful the first time but kept on
getting cancelled in other attempts:
Workflow created (ID: 12799), State: CANCELED
I think, the workflow will be cancelled if the CRL is too recent, see
last_update, next_update in the output below. you can enforce the creation:
# openxpkicmd --realm democa crl_issuance --param force_issue=1
Furthermore, I still don't know how the CRL can be downloaded from the CLI
without the use of web interface.
# openxpkicli --realm democa get_crl_list
[
{
"crl_key" : "1535",
"crl_number" : "1535",
"issuer_identifier" : "p52ci8l8mqcdIZr6jM4nBkJmQiQ",
"items" : 0,
"last_update" : 1725385282,
"max_revocation_id" : 1,
"next_update" : 1726594882,
"pki_realm" : "democa",
"profile" : null,
"publication_date" : 1725385282
},
{
"crl_key" : "1279",
"crl_number" : "1279",
"issuer_identifier" : "p52ci8l8mqcdIZr6jM4nBkJmQiQ",
"items" : 0,
"last_update" : 1725385253,
"max_revocation_id" : 1,
"next_update" : 1726594853,
"pki_realm" : "democa",
"profile" : null,
"publication_date" : 1725385253
}
]
# openxpkicli --realm democa --help get_crl_list
# openxpkicli --realm democa --help get_crl
Best,
-ap
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
