Skip to content

PKI Server KRA CLI

Jump to bottom
Endi S. Dewata edited this page Dec 10, 2020 · 8 revisions

Preparing KRA Clone

To export the KRA system certificates for cloning, execute the following command:

$ pki-server kra-clone-prepare --pkcs12-file kra-clone.p12 --pkcs12-password-file password.txt

KRA VLV Management

Listing KRA VLVs

To list KRA VLV indexes currently in the database execute the following command:

$ pki-server kra-db-vlv-find
----------------
26 entries found
----------------
  dn: cn=allKeys-pki-tomcat,cn=kra,cn=ldbm database,cn=plugins,cn=config
  objectClass: top
  objectClass: vlvSearch
  vlvScope: 1
  vlvFilter: (&(serialno=*)(!(realm=*)))
  vlvBase: ou=keyRepository,ou=kra,dc=kra,dc=pki,dc=example,dc=com
  cn: allKeys-pki-tomcat

...

Adding KRA VLVs

To import KRA VLV indexes from /usr/share/pki/kra/conf/vlv.ldif into the database execute the following command:

$ pki-server kra-db-vlv-add
KRA VLVs added to the database for pki-tomcat

Reindexing KRA VLVs

To rebuild KRA VLV indexes in the database execute the following command:

$ pki-server kra-db-vlv-reindex
Initiating KRA VLV reindex for pki-tomcat
KRA VLV reindex completed for pki-tomcat

Deleting KRA VLVs

To remove KRA VLV indexes currently in the database execute the following command:

$ pki-server kra-db-vlv-del
KRA VLVs deleted from the database for pki-tomcat

KRA Audit Management

Subsystem Management

See Also

Tip
 To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.
Clone this wiki locally