FileBaseCRLPublisher should clean up old CRL files

[pki-bot]

This issue was migrated from Pagure Issue #2274. Originally filed by cheimes (@tiran) on 2016-04-07 15:06:11:

• Closed as Duplicate
• Assigned to nobody

---

FreeIPA uses FileBaseCRLPublisher to publish CRLs to /var/lib/ipa/pki-ca/publish/. Dogtag dumps a new CRL every four hours but never cleans up the directory. For example one of my test VMs has more than 1,200 files in /var/lib/ipa/pki-ca/publish/. The oldest CRL is from June 2015.

I suggest that FileBaseCRLPublisher gets a new option to remove CRLs older than X days. 14 days sound like sane default value.

FreeIPA ticket: https://fedorahosted.org/freeipa/ticket/3728

[pki-bot]

Comment from cheimes (@tiran) at 2016-04-07 15:37:03

Duplicate of 2254

[pki-bot]

Comment from cheimes (@tiran) at 2017-02-27 14:09:24

Metadata Update from @tiran:

• Issue set to the milestone: N/A