Hi Arthur,

> CRL expired - update required!
Login as Operator, go to "PKI Operations" and "Issue CRL".
I recommend just running a cronjob doing this
/usr/bin/openxpkicmd crl_issuance

> Encryption token is expired
Generate a new Encryption Certificate/Key Pair - as this is used
internally only, you can use a selfsigned one.
Put the key file to /etc/openxpki/ssl/ca-one/ca-one-vault-2.pem

Import the generated certificate and mark it as crypto token
openxpkiadm certificate import  --file vaultcert.crt --realm ca-one
--token datasafe

Note: The password for the key must match the value in crypto.yaml - if
you used the sample setup script, the password is "root".

Oliver

-- 
Protect your environment -  close windows and adopt a penguin!

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to