[Freeipa-devel] [PATCH] 255 publish CRLs

Simo Sorce ssorce at redhat.com
Mon Aug 24 18:14:12 UTC 2009


On Mon, 2009-08-24 at 13:44 -0400, Rob Crittenden wrote:
> 
> This patch configures the CA to publish CRLs and makes that directory 
> available via Apache so one can retrieve them. The URI will
> be /ipa/crl/
> 
> I made that directory indexable so one can pull delta CRLs or older
> ones 
> if desired. There is always a symbolic link to the latest named 
> MasterCRL.bin. I had to add some SELinux permissions to let Apache
> read 
> these files.

ack, awesome and so simple.

Simo.
-- 
Simo Sorce * Red Hat, Inc * New York




More information about the Freeipa-devel mailing list