FULL_CRL_GENERATION Audit Event - dogtagpki/pki GitHub Wiki

Overview

Since version 10.4.x CA will generate a FULL_CRL_GENERATION event when the full CRL generation is complete.

Examples

Use the Web UI to update the CRL. The server will generate the following log when the full CRL generation is complete:

[AuditEvent=FULL_CRL_GENERATION][SubjectID=$System$][Outcome=Success][CRLnum=<CR
L number>] Full CRL generation

If noCRLIfNoRevokedCert is true and there is no revoked certificates, the server will generate the following events:

[AuditEvent=FULL_CRL_GENERATION][SubjectID=$System$][Outcome=Success][Info=No Re
voked Certificates] Full CRL generation

If the full CRL generation fails, the server will generate an event with the failure reason:

[AuditEvent=FULL_CRL_GENERATION][SubjectID=$System$][Outcome=Failure][FailureRea
son=<reason>] Full CRL generation

Tip	To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.