[Pki-users] Crl Generation question

[Andrew Wnuk]

On 11/05/09 13:27, Veale, Sean wrote:
>
> Hi,
>
> Is is possible for to configure a CA so the CRLs are generated every X 
> time (say every 1 day) but Next Update specified for a longer time, 
> say every 5 days?
>
> If so, how do you do that?
>
> Thanks
> Sean
>
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users
>    

Yes, you can configure CA

    through CA console

        to "Update CRL ever: 1440 minutes"
        with "Next update grace period: 5760 minutes"

    or through CS.cfg

        . . .
        ca.crl.</CRL-Issuing-Point-Name/>.autoUpdateInterval=1440
        . . .
        ca.crl.</CRL-Issuing-Point-Name/>.nextUpdateGracePeriod=5760
        . . .

Andrew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20091105/1eb762fd/attachment.htm>