Revize 64cfca84

Re #8576 - cryptography.py implemented generate_crl()

src/constants.py

@@ -60 +60 @@
                                   "superseded", "cessationOfOperation",
                                   "certificateHold", "removeFromCRL",
                                   "privilegeWithdrawn", "aACompromise"}
+
+
+# Insert values into the template using % (index_file, serial_file)
+CRL_CONFIG = """[ ca ]
+default_ca = crl_ca
+
+[ crl_ext ]
+authorityKeyIdentifier=keyid:always
+
+[ crl_ca ]
+database = %s
+serial = %s
+default_md = sha1
+policy = clr_policy
+default_crl_days = 30
+
+[ clr_policy ]
+commonName = supplied
+stateOrProvinceName = optional
+countryName = optional
+emailAddress = optional
+organizationName = optional
+organizationalUnitName = optional
+
+"""
+