Crl Generation question
Hi, Is is possible for to configure a CA so the CRLs are generated every X time (say every 1 day) but Next Update specified for a longer time, say every 5 days? If so, how do you do that? Thanks Sean
On 11/05/09 13:27, Veale, Sean wrote:
Hi,
Is is possible for to configure a CA so the CRLs are generated every X time (say every 1 day) but Next Update specified for a longer time, say every 5 days?
If so, how do you do that?
Thanks Sean
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
Yes, you can configure CA through CA console to "Update CRL ever: 1440 minutes" with "Next update grace period: 5760 minutes" or through CS.cfg . . . ca.crl.</CRL-Issuing-Point-Name/>.autoUpdateInterval=1440 . . . ca.crl.</CRL-Issuing-Point-Name/>.nextUpdateGracePeriod=5760 . . . Andrew
Great. Thanks Sean ________________________________ From: pki-users-bounces@redhat.com [mailto:pki-users-bounces@redhat.com] On Behalf Of Andrew Wnuk Sent: Thursday, November 05, 2009 5:22 PM To: pki-users@redhat.com Subject: Re: [Pki-users] Crl Generation question On 11/05/09 13:27, Veale, Sean wrote: Hi, Is is possible for to configure a CA so the CRLs are generated every X time (say every 1 day) but Next Update specified for a longer time, say every 5 days? If so, how do you do that? Thanks Sean _______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users Yes, you can configure CA through CA console to "Update CRL ever: 1440 minutes" with "Next update grace period: 5760 minutes" or through CS.cfg . . . ca.crl.<CRL-Issuing-Point-Name>.autoUpdateInterval=1440 . . . ca.crl.<CRL-Issuing-Point-Name>.nextUpdateGracePeriod=5760 . . . Andrew
participants (2)
-
Andrew Wnuk -
Veale, Sean