-#! /usr/bin/tclsh8.5
+#! /usr/bin/tclsh
### -*-tcl-*-
###
### Run periodic maintenance on the certificate database
db nullvalue nil
cd "$CERTROOT"
+## Refresh the database's idea of request profiles.
+sync-profiles
+
## Reissue certificates for requests which need it.
set now [now]
set now_db [time-db $now]
exec openssl ca -config "etc/openssl.conf" -gencrl | \
openssl crl -text -out "crl" 2>@1
+## Call the user hook.
+update-hook
+
###----- That's all, folks --------------------------------------------------