1ipa-crlgen-manage(1) IPA Manual Pages ipa-crlgen-manage(1)
2
3
4
6 ipa-crlgen-manage - Enables or disables CRL generation
7
9 ipa-crlgen-manage [options] <enable|disable|status>
10
12 Run the command with the enable option to enable CRL generation on the
13 local host. This requires that the IPA server is already installed and
14 configured, including a CA. The command will restart Dogtag and Apache.
15
16 Run the command with the disable option to disable CRL generation on
17 the local host. The command will restart Dogtag and Apache.
18
19 Run the command with the status option to determine the current status
20 of CRL generation. If the local host is configured for CRL generation,
21 the command also prints the last CRL generation date and number.
22
23 Important: the administrator must ensure that there is only one IPA
24 server generating CRLs. In order to transfer the CRL generation from
25 one server to another, please run ipa-crlgen-manage disable on the cur‐
26 rent CRL generation master, followed by ipa-crlgen-manage enable on the
27 new CRL generation master.
28
30 --version
31 Show the program's version and exit.
32
33 -h, --help
34 Show the help for this program.
35
36 -v, --verbose
37 Print debugging information.
38
39 -q, --quiet
40 Output only errors.
41
42 --log-file=FILE
43 Log to the given file.
44
46 0 if the command was successful
47
48 1 if an error occurred
49
50 2 if the local host is not an IPA server
51
52
53
54IPA Feb 12 2019 ipa-crlgen-manage(1)