Hi,

Is is possible for to configure a CA so the CRLs are generated every X time (say every 1 day) but Next Update specified for a longer time, say every 5 days?

If so, how do you do that?

Thanks
Sean

_______________________________________________
Pki-users mailing list
Pki-users@redhat.com
https://www.redhat.com/mailman/listinfo/pki-users
  

through CA console

to "Update CRL ever: 1440 minutes"
with "Next update grace period: 5760 minutes"

or through CS.cfg

. . .
ca.crl.<CRL-Issuing-Point-Name>.autoUpdateInterval=1440
. . .
ca.crl.<CRL-Issuing-Point-Name>.nextUpdateGracePeriod=5760
. . .