[Eisfair] [E1] certs: update revocation-list Fehlermeldung

[Rolf Bensch]

Hallo Marcus,

Am 22.11.19 um 19:14 schrieb Marcus Roeckrath:
> Hallo Rolf,
> 
> Rolf Bensch wrote:
> 
>> - job '2660' (2019-11-24 18:07) already exists.
>> - downloading 'http://ocsp.comodoca.com/!serverdomain.org.pem' ...
>> - updating CRL list ...
>> - downloading 'http://ocsp.comodoca.com/!serverdomain.org-1.pem' ...
>> - updating CRL list ...
>> - job '2669' (2019-11-27 19:17) already exists.
>> - downloading 'http://ocsp.comodoca.com/!serverdomain.org-2.pem' ...
>> - updating CRL list ...
>> - job '2670' (2019-11-27 19:20) already exists.
> 
> Du hattest die serverdomain.org-Dubletten wirklich gelöscht?
> 
> Jetzt gibt es nämlich 3 Jobs für das leich CRL-Update.
> 
> Nach Löschen der doppelten PEMs solltest du die CRL-Bereinigung durchführen.
> 

ja. gerade nochmals gecheckt:

ibs-server # cd /usr/local/ssl/certs/
ibs-server # ls -l *comodo*
-rw-r--r-- 1 root root 6693 Nov 22 22:00 
comodo_rsa_certification_authority.pem
-rw-r--r-- 1 root root 6958 Nov 22 22:00 
comodo_rsa_domain_validation_secure_server_ca.pem
ibs-server # /var/install/bin/certs-update-hashes --both
...
Certificate revocation list (CRL) handling

fetching CRL URLs from certificates ...
...
- updating CRL list ...
- job '2664' (2019-11-24 23:03) already exists.
- downloading 'http://ocsp.comodoca.com/!whserv.de.pem' ...
   file 'http://ocsp.comodoca.com/!whserv.de.pem' download failed!
- downloading 
'http://ocsp.usertrust.com/!comodo_rsa_certification_authority-1.pem' ...
   file 
'http://ocsp.usertrust.com/!comodo_rsa_certification_authority-1.pem' 
download failed!
- downloading 
'http://ocsp.usertrust.com/!comodo_rsa_certification_authority-2.pem' ...
   file 
'http://ocsp.usertrust.com/!comodo_rsa_certification_authority-2.pem' 
download failed!
- downloading 
'http://ocsp.comodoca.com/!comodo_rsa_domain_validation_secure_server_ca-1.pem' 
...
   file 
'http://ocsp.comodoca.com/!comodo_rsa_domain_validation_secure_server_ca-1.pem' 
download failed!
- downloading 
'http://ocsp.comodoca.com/!comodo_rsa_domain_validation_secure_server_ca-2.pem' 
...
   file 
'http://ocsp.comodoca.com/!comodo_rsa_domain_validation_secure_server_ca-2.pem' 
download failed!
- downloading 'http://ocsp.comodoca.com/!serverdomain.org-1.pem' ...
   file 'http://ocsp.comodoca.com/!serverdomain.org-1.pem' download failed!
- downloading 'http://ocsp.comodoca.com/!serverdomain.org-2.pem' ...
   file 'http://ocsp.comodoca.com/!serverdomain.org-2.pem' download failed!
updating hashes ...
finished.
Press ENTER to continue

Certificate administration

Grüße Rolf