Re: [Pki-users] Crl Generation question

On 11/05/09 13:27, Veale, Sean wrote:

Hi,

Is is possible for to configure a CA so the CRLs are generated every X time (say every 1 day) but Next Update specified for a longer time, say every 5 days?

If so, how do you do that?

Thanks Sean

_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users

Yes, you can configure CA through CA console to "Update CRL ever: 1440 minutes" with "Next update grace period: 5760 minutes" or through CS.cfg . . . ca.crl.</CRL-Issuing-Point-Name/>.autoUpdateInterval=1440 . . . ca.crl.</CRL-Issuing-Point-Name/>.nextUpdateGracePeriod=5760 . . . Andrew