ipa-crlgen-manage(1)

📦 version 4.13.4, in centos-stream 10, centos-stream 9, fedora 43, fedora 44

💅 ipa-crlgen-manage — the ipa-crlgen-manage(1) glow-up ✨

okay bestie, gather round, because this lil command from the IPA Manual Pages is the one that flips CRL generation on and off, and she is lowkey powerful 👑

🌸 NAME 🌸

ipa-crlgen-manage — Enables or disables CRL generation

🎀 SYNOPSIS 🎀

ipa-crlgen-manage [options] <enable|disable|status>

that's it. three little modes. choose your fighter 💖

🦋 DESCRIPTION 🦋

So here's the tea, bestie ☕ run this command with the enable option and you're turning CRL generation ON on the local host. But listen — this only works if the IPA server is already installed and configured, including a CA. No CA, no CRL, no vibes. And heads up: the command is gonna restart Dogtag and Apache. like, full refresh, no cap. 🔄

Run it with the disable option and you're turning CRL generation OFF on the local host. And yes, it also restarts Dogtag and Apache. same energy, opposite direction 😌

Run it with the status option to find out the current status of CRL generation. And if the local host is configured for CRL generation, she's extra and also prints the last CRL generation date and the number. very main character of her ✨

⚠️ IMPORTANT, and I mean it, fr fr: the administrator MUST make sure there is only one IPA server generating CRLs. One. Singular. The moment there's two, it's chaos, it's giving drama, we don't want it 💀 Wanna transfer CRL generation from one server to another? Do it in this order, exactly: 1. run ipa-crlgen-manage disable on the current CRL generation master 2. then run ipa-crlgen-manage enable on the new CRL generation master periodt. in that order. no skipping steps 🙈

✨ OPTIONS ✨

  • --version — shows the program's version and then dips out. bye 💨
  • -h, --help — shows the help for this program. your lil cheat sheet 🫶
  • -v, --verbose — prints debugging information. for when you need the whole story 🗣️
  • -q, --quiet — outputs only errors. minimal. silent. mysterious. 🤫
  • --log-file=*FILE* — logs to the given file. keep the receipts, bestie 🧾

🌈 EXIT STATUS 🌈

  • 0 — the command was successful 🎉 ate and left no crumbs
  • 1 — an error occurred 😭 it's giving oops
  • 2 — the local host is not an IPA server 💀 wrong party, babe

💜 a lil sign-off 💜

this page comes to you from IPA, dated Feb 12 2019 — yes she's an elder icon but she still slays 🌟 and that's the whole manual, bestie. go forth and manage those CRLs responsibly 👑💖

📦 where this page comes from