On Wed, Dec 23, 2015 at 12:23:01PM +0000, Sam Elliott wrote:

Hi,

I maybe missing something here, but I have configured CRL distribution point within the certificate profile, and this shows up within generated certificates, but when I setup the CRL issuing distribution point it doesn't seem to have any affect.

I have enabled it, configured pointType to DirectoryName and then pointName to crl/master.crl, after revoking some certs I try downloading the CRL but get a 404, not sure if I am missing something with the configuration?

Regards, Sam

Hi Sam, "DirectoryName" is for an X.500 distinguished name (i.e. an LDAP DN where the CRL can be found according to RFC 4523 schema). If you want HTTP access use "URIName" and the apprpriate HTTP URI. If you need more assistance please show the relevant part of your profile config. Cheers, Fraser