Hi Marko,

the certificate handling part of the openxpkiadm command is known to be broken, we are building a new CLI which will hopefully be available at least in a beta state with the next release.

I dont understand what you mean with "metadata" - you can not change a certificates validity without changing the cert - what kind of cert is this and how is it used? There are several commands for certificate management using the "openxpkicli" interface via the API that might be helpful, or the fast way is to just use SQL...

Oliver

On 19.10.24 16:51, openxpki.p9abw--- via OpenXPKI-users wrote:
Heho
I'm pretty new to openxpki an ran into a little problem.

Ref: https://github.com/openxpki/openxpki/issues/920#issuecomment-2423776202

If I try to remove a certificate I get the following output:
-----------
openxpkiadm certificate remove --name 7LgtOek-y16Jr3rmgHHwwE0K08k --debug 128
[DEBUG] New session of type 'Memory' created
I18N_OPENXPKI_SERVER_CONTEXT_CTX_OBJECT_NOT_DEFINED
    OBJECT: session
---------
With --force I can remove the certificate, but it doesn't get removed 
completely. So if I re-import the invoked certificate then it shows the old 
metadata (instead expire 2024, it shows 2034)

I can't really understand how to fix this. Is it a possible configuration error?

Greetings
Marko

Debian Bookworm
Version (core): 3.30.3



_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

--
Protect your environment -  close windows and adopt a penguin!



_______________________________________________
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to