James,

> For the 'openxpkicli import_certificate' command there is a additional
> parameter named 'profile' which takes a string argument. Is this string a path
> to a file; or just the name of a file; or something else?

Well, it's the profile name...

In terms of the OpenXPKI configuration tree, this value references a leaf node 
below the "profile" node of a realm. In case of our published example YAML 
configuration layout (courtesy of Config::Merge), this also happens to be a 
file name in the profile directory of the realm.

> 
> openxpkicli --realm hll_ca2016 \
>    --filearg data=bare_20160001.pem \
>    --param pki_realm='hll_ca2016' \
>    --param update=1 \
>  import_certificate
> 
> Is the profile parameter significant in placing an imported certificate into a
> specific realm?

I don't understand the question. If you want to associate the imported 
certificate with a profile, you can specify it as an option for the 
import_certificate API function.

> Is the default.yaml a valid profile for the purpose of importing a certificate
> into a specific realm?

No, as the name suggests it contains the common defaults for all other defined 
profiles.

Cheers

Martin




_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to