grid-update-crls(8)

NAME
grid-update-crls - Update certificate revocation lists

SYNOPSIS
grid-update-crls [verbose]

DESCRIPTION
grid-update-crls will try to download known CRLs and save them using the hash form for the filename. If verbose is given as argument the script will print out some diagnostics. The script should normally be run through cron(8). The URLs for the CRLs are taken from the files:
      /etc/grid-security/certificates/*.crl_url The basename of the filenames must include a valid hash: <hash>.crl_url.

EXAMPLE
If the file:
      /etc/grid-security/certificates/1f0e8352.crl_url with the contents of:
      http://www.nbi.dk/HEP/CA/1f0e8352.r0 exists, grid-update-crls will try to download
      http://www.nbi.dk/HEP/CA/1f0e8352.r0 and place it in
      /etc/grid-security/certificates/1f0e8352.r0 Before committing the CRL a check is made against the CA certificate which must exist in:
      /etc/grid-security/certificates/1f0e8352.0 Otherwise a warning is issued and the CRL is not installed.

ENVIRONMENT VARIABLES

X509_CERT_DIR
    This variable controls the location of the certificate files. It defaults to /etc/grid-security/certificates

LIMITATIONS
The URLs in the /etc/grid-security/certificates/*.crl_url files must be understood by wget(1).

FILES
/etc/grid-security/certificates/*.crl_url /etc/grid-security/certificates/*.r0 /etc/grid-security/certificates/*.0

REQUIREMENTS
wget(1) and openssl(1)

AUTHOR
Anders Wäänänen <waananen@nbi.dk> grid-update-crls