Name

OpenXPKI::Server::Workflow::Activity::CRLIssuance::CreateQueue

Description

Iterate over all CAs in the current realm and check if they need to issue a new CRL. A list of the ca token alias names is written to the context as ca_alias_list. A ca is added to the list if there are certificates in status CRL_ISSUANCE_PENDING or if the validty date of the latest crl is in the configured renewal interval (realm.crl.default.validity.renewal).

If the force_issue flag is present in the context, each ca which is currently valid, will issue a new crl.