Hi Kevin,

> Is it possible to have the CRL list published to a static file when (say 
> /var/www/latest.crl) so that I could include that with the certs that are 
> generated?

Sure you can. Have a look at the sample configuration file:

https://github.com/openxpki/openxpki-config/blob/master/config.d/realm/ca-one/publishing.yaml#L8

lists the Connectors that receive the CRL for publication. In this example the 
CRL is actually written to a file that is referenced in the section below:

https://github.com/openxpki/openxpki-config/blob/master/config.d/realm/ca-one/publishing.yaml#L52

What happens in the background:
The system queries the config path …realm/ca-one/publishing/crl to publish CRLs 
once created.
In the configuration here we created a custom sub section called „cdp“ in which 
we happen to write out the PEM content of the CRL (this is template toolkit 
syntax) to /tmp
This configuration section is then referenced in line 8 (via the @ in the 
reference).


The configuration scheme is very extensible and allows for really cool tricks… 
;-)

cu

Martin


------------------------------------------------------------------------------
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to