Revize dd91fb7a

Re #8576 - openssl config template update, comment added

src/constants.py

@@ -72 +72 @@
 database = %s
 serial = %s
 default_md = sha1
-policy = clr_policy
+policy = crl_policy
 default_crl_days = 30
 
-[ clr_policy ]
+[ crl_policy ]
 commonName = supplied
 stateOrProvinceName = optional
 countryName = optional

src/services/cryptography.py

@@ -368 +368 @@
         :param index_file_path: path to a file that contains the openssl index with all revoked certificates
         :return: CRL encoded in PEM format string
         """
+        # openssl ca requires the .srl file to exists, therefore a dummy, unused file is created
         with TemporaryFile("serial.srl", "0") as serial_file, \
              TemporaryFile("crl.conf", CRL_CONFIG % (index_file_path, serial_file)) as config_file, \
              TemporaryFile("certificate.pem", cert.pem_data) as cert_file, \