sraustein
commented
8 years ago As stated above, that trailing stuff is optional. In point of fact, it's a kludge, and I probably shouldn't have included it in the instructions at all, since it makes assumptions about handle names that happen to be correct in all of my test cases but aren't in your running CA.
If everything else went well, you should be able to extract root certificate and TAL now.
Trac comment by sra on 2016-05-08T02:35:28Z
{{{ newca0.rpki.net:/root/CA-stuff# root_handle=
rpkic list_tenant_handles | egrep -v '^[A-Z]'newca0.rpki.net:/root/CA-stuff# echo $root_handle altCA rgnet esnet vicwellington unistra 5638751c-68a1-4260-903e-d030349c39fe newca0.rpki.net:/root/CA-stuff# rpkic -i $root_handle force_run_now usage: rpkic [-h] [-c CONFIG] [-i IDENTITY] [--profile PROFILE] ... rpkic: error: argument : invalid choice: 'rgnet' (choose from 'select_identity', 'initialize', 'create_identity', 'initialize_server_bpki', 'update_bpki', 'configure_child', 'delete_child', 'configure_parent', 'delete_parent', 'configure_root', 'delete_root', 'extract_root_certificate', 'extract_root_tal', 'configure_publication_client', 'delete_publication_client', 'configure_repository', 'delete_repository', 'delete_identity', 'renew_child', 'renew_all_children', 'load_prefixes', 'show_child_resources', 'show_roa_requests', 'show_ghostbuster_requests', 'show_received_resources', 'show_published_objects', 'show_bpki', 'load_asns', 'load_roa_requests', 'load_ghostbuster_requests', 'add_router_certificate_request', 'delete_router_certificate_request', 'show_router_certificate_requests', 'synchronize', 'force_publication', 'force_reissue', 'force_run_now', 'up_down_rekey', 'up_down_revoke', 'revoke_forgotten', 'clear_all_sql_cms_replay_protection', 'version', 'list_tenant_handles') }}}Trac ticket #815 component testbed priority blocker, owner None, created by randy on 2016-05-08T02:28:15Z, last modified 2016-05-09T05:36:09Z