Hi,
while testing auto-CRL issuing on my PKI server, I've had to restart it
several times already.
Normally, it checks for the need to issue a new CRL every minute, and
this keeps working for several hours, succesfully issuing several CRL's:
> On-Line CRL::autoCRLProcess() started
> On-Line CRL::autoCRLProcess()::Start Request Listing
> On-Line CRL::autoCRLProcess()::CRL last update = 20100609050028 ( Jun 9
> 05:00:28 2010 GMT ) - CRL Serial [70]
> On-Line CRL::autoCRLProcess()::Today = 20100609055128 (Wed Jun 9 05:51:28
> 2010)
> On-Line CRL::autoCRLProcess()::No CRL to issue (5100 < 7200)
Until it suddenly aborts with:
> On-Line CRL::autoCRLProcess() started
> On-Line CRL::autoCRLProcess()::Start Request Listing
> OpenCA: General error trapped 700: The compilation of the command
> cmdStartAutoCRL failed. Can't locate object method "setHeaderAttribute" via
> package "OpenCA::CRL" at
> /opt/openca-base-1.1.0/lib/openca/perl_modules/perl5/OpenCA/CRL.pm line
> 453.<br>
Resuming it continues to work fine for a while:
> On-Line CRL::autoCRLProcess() started
> On-Line CRL::autoCRLProcess()::Start Request Listing
> On-Line CRL::autoCRLProcess()::CRL last update = 20100608125732 ( Jun 8
> 12:57:32 2010 GMT ) - CRL Serial [53]
> On-Line CRL::autoCRLProcess()::Today = 20100614124045 (Mon Jun 14 12:40:45
> 2010)
> On-Line CRL::autoCRLProcess()::Time to issue a new CRL ( 5998313 > 7200)
> autoCRL::Extensions selected for CRL are (crl_ext)
Is this a known issue?
Is there a fix or a workaround?
Geert
--
Geert Hendrickx -=- g...@telenet.be -=- PGP: 0xC4BB9E9F
This e-mail was composed using 100% recycled spam messages!
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users
