Re: [OpenXPKI-users] automate the creation and publishing of crl
Hi Oli, I've found only the manual workflow to publish a new CRL. Is there any way to automatically renew the CRL before it expires, or automatically recreate the CRL when a new certificate is revoked? My solution was the only way I've found to achive this Without this my CRL was always expiring after a certain amount of days. Greetings, Thomas Von: Oliver Welter Gesendet: Freitag, 20. Januar 2023 06:55 An: openxpki-users@lists.sourceforge.net Betreff: Re: [OpenXPKI-users] automate the creation and publishing of crl Hi Guys, the issuance workflow already contains the publish step so there is no need for both ;) Oli ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] Default value's in profile templates
Perfect. Thanks. Best regards mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur -Ursprüngliche Nachricht- Von: Martin Bartosch via OpenXPKI-users Gesendet: Donnerstag, 19. Januar 2023 16:10 An: openxpki-users@lists.sourceforge.net Cc: Martin Bartosch Betreff: Re: [OpenXPKI-users] Default value's in profile templates Hi, > ***SNIP*** > I was adding a new certificate profile last week and had to add the new field > template. > For that new use case, the value for the field would always be the same. So > I'd like to have this pre-filled when reaching the workflow step but still > editable, if it needs to be changed. > In the sample no "default" value is mentioned, but I'd like to have that > available. > Is there an option available? > ***SNAP*** > > I have the same problem and I am looking for a solution for it. Can anyone > help me? Default field values in templates can be set via "preset". There are quite some examples using such a preset in the profile/template/ directory. Cheers Martin ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] customize mail template per realm
Hi Ronald, "better solution" always depends on scope and knowledge or as the perl people say: TMTOWTDI ;) It is the easy way, another one would be to use the template engine to have if/else blocks that are rendered based on the realm which you can find in 'meta_pki_realm'. Oli On 19.01.23 11:17, Zestermann, Ronald wrote: Hello folks, I would like to customize per realm the mail templates. I would do this by copying the content of /etc/openxpki/template/email/ to each realm and then customize it individually. Is this the right way or is there a better solution? Best regards mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin! ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] automate the creation and publishing of crl
Hi Guys, the issuance workflow already contains the publish step so there is no need for both ;) Oli On 19.01.23 11:46, Zimmermann Thomas via OpenXPKI-users wrote: Hi, i'm using the following command to create a file in cron.daily to update CRL und publish the CA certificate: cat << EOF > /etc/cron.daily/openxpki-publish-crl #!/bin/sh /usr/bin/openxpkicmd --realm testca crl_issuance /usr/bin/openxpkicmd --realm testca ca_publish EOF Kind regards, Thomas *Von:* Zestermann, Ronald *Gesendet:* Donnerstag, 19. Januar 2023 11:21 *An:* 'openxpki-users@lists.sourceforge.net' *Betreff:* EXT: [OpenXPKI-users] automate the creation and publishing of crl EXTERNAL SENDER Hello folks, how can i automate the creation and publishing of crl? I would like to do this via a cron job. Unfortunately I can't find any suitable commands. Best regards mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin! ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] Default value's in profile templates
Hi, > ***SNIP*** > I was adding a new certificate profile last week and had to add the new field > template. > For that new use case, the value for the field would always be the same. So > I'd like to have this pre-filled when reaching the workflow step but still > editable, if it needs to be changed. > In the sample no "default" value is mentioned, but I'd like to have that > available. > Is there an option available? > ***SNAP*** > > I have the same problem and I am looking for a solution for it. Can anyone > help me? Default field values in templates can be set via "preset". There are quite some examples using such a preset in the profile/template/ directory. Cheers Martin ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
[OpenXPKI-users] Default value's in profile templates
Hello folks, a few years ago there was the following question in the forum: ***SNIP*** I was adding a new certificate profile last week and had to add the new field template. For that new use case, the value for the field would always be the same. So I'd like to have this pre-filled when reaching the workflow step but still editable, if it needs to be changed. In the sample no "default" value is mentioned, but I'd like to have that available. Is there an option available? ***SNAP*** I have the same problem and I am looking for a solution for it. Can anyone help me? mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] automate the creation and publishing of crl
Thank you, that's what I was looking for. mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur -Ursprüngliche Nachricht- Von: Zimmermann Thomas via OpenXPKI-users Gesendet: Donnerstag, 19. Januar 2023 11:47 An: 'openxpki-users@lists.sourceforge.net' Cc: Zimmermann Thomas Betreff: Re: [OpenXPKI-users] automate the creation and publishing of crl Hi, i'm using the following command to create a file in cron.daily to update CRL und publish the CA certificate: cat << EOF > /etc/cron.daily/openxpki-publish-crl #!/bin/sh /usr/bin/openxpkicmd --realm testca crl_issuance /usr/bin/openxpkicmd --realm testca ca_publish EOF Kind regards, Thomas Von: Zestermann, Ronald Gesendet: Donnerstag, 19. Januar 2023 11:21 An: 'openxpki-users@lists.sourceforge.net' Betreff: EXT: [OpenXPKI-users] automate the creation and publishing of crl EXTERNAL SENDER Hello folks, how can i automate the creation and publishing of crl? I would like to do this via a cron job. Unfortunately I can't find any suitable commands. Best regards mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
Re: [OpenXPKI-users] automate the creation and publishing of crl
Hi, i'm using the following command to create a file in cron.daily to update CRL und publish the CA certificate: cat << EOF > /etc/cron.daily/openxpki-publish-crl #!/bin/sh /usr/bin/openxpkicmd --realm testca crl_issuance /usr/bin/openxpkicmd --realm testca ca_publish EOF Kind regards, Thomas Von: Zestermann, Ronald Gesendet: Donnerstag, 19. Januar 2023 11:21 An: 'openxpki-users@lists.sourceforge.net' Betreff: EXT: [OpenXPKI-users] automate the creation and publishing of crl EXTERNAL SENDER Hello folks, how can i automate the creation and publishing of crl? I would like to do this via a cron job. Unfortunately I can't find any suitable commands. Best regards mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
[OpenXPKI-users] customize mail template per realm
Hello folks, I would like to customize per realm the mail templates. I would do this by copying the content of /etc/openxpki/template/email/ to each realm and then customize it individually. Is this the right way or is there a better solution? Best regards mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
[OpenXPKI-users] automate the creation and publishing of crl
Hello folks, how can i automate the creation and publishing of crl? I would like to do this via a cron job. Unfortunately I can't find any suitable commands. Best regards mit besten Grüßen Ronald Zestermann SB IT-Infrastruktur ___ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
