Thanks
I am trying this, do you know which index can use ?
# openssl ca -gencrl -keyfile ca_key.pem -cert ca_crt.pem -out test
Using configuration from /etc/pki/tls/openssl.cnf
../../CA/index.txt: No such file or directory
unable to open '../../CA/index.txt'
4717:error:02001002:system library:fopen:No such file or
directory:bss_file.c:352:fopen('../../CA/index.txt','r')
4717:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354:
2011/2/21 Felix Frank <felix.fr...@alumni.tu-berlin.de>:
>
>
> On 02/21/2011 06:00 PM, vincent wrote:
>> the file ca_crl.pem was cleaned accidentally.
>> How can I have an empty revocation list ?
>
> I'd assume puppet would create a new one for you.
> I'm not sure what the puppet way to do this is.
> Have a look at "puppet cert --help".
>
> Failing that, create a CRL using your CA and key as described in
> http://gagravarr.org/writing/openssl-certs/ca.shtml#ca-revoke
>
> Yes, it's not quite trivial.
>
> HTH,
> Felix
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to
> puppet-users+unsubscr...@googlegroups.com.
> For more options, visit this group at
> http://groups.google.com/group/puppet-users?hl=en.
>
>
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
