Hello list,
I'm trying to test expiry notification test but I must do it wrong.
My idea was to the the cutoff_notafter form +60 days to +1 year;
diff --git a/config.d/realm.tpl/report/expiry.yaml
b/config.d/realm.tpl/report/expiry.yaml
index 1ab0a1b..9a2de6e 100644
--- a/config.d/realm.tpl/report/expiry.yaml
+++ b/config.d/realm.tpl/report/expiry.yaml
@@ -1,7 +1,8 @@
label: Expiry Report
head: "Certificate Expiry Report, created at: [% export_date %]"
delimiter: "\t"
-cutoff_notafter: +000060
+#cutoff_notafter: +000060
+cutoff_notafter: +01
include_expired: -000030
cols:
and ran:
# openxpkicmd --realm democa notify_expiry
But "Certificate Status Summary" in WebUI reports 0 certificates near
expiration and emails are sent.
I also don't quite understand the sign of parameter cutoff_notafter and included_expired. I thought,
certificates with notafter > now - 60 days are considered as near expiration and all certifcates with
notafter > now + 30 days are included but the signs are "+" for cutoff_notafter and
"-" for included_expired.
What I'm missing here? How can certificates with let's say 11 months lifetime
left be considered as near expiration?
Best,
-ap
_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users
