[Pki-users] Crl Generation question

Veale, Sean sean.veale at gdc4s.com
Thu Nov 5 22:37:27 UTC 2009


Great.

Thanks 
Sean

________________________________

From: pki-users-bounces at redhat.com [mailto:pki-users-bounces at redhat.com]
On Behalf Of Andrew Wnuk
Sent: Thursday, November 05, 2009 5:22 PM
To: pki-users at redhat.com
Subject: Re: [Pki-users] Crl Generation question


On 11/05/09 13:27, Veale, Sean wrote: 


	Hi, 

	Is is possible for to configure a CA so the CRLs are generated
every X time (say every 1 day) but Next Update specified for a longer
time, say every 5 days?

	If so, how do you do that? 
	
	Thanks
	Sean 

	
	_______________________________________________
	Pki-users mailing list
	Pki-users at redhat.com
	https://www.redhat.com/mailman/listinfo/pki-users
	  


Yes, you can configure CA 


	through CA console
	

		to "Update CRL ever: 1440 minutes"
		with "Next update grace period: 5760 minutes"
		

	or through CS.cfg 
	

		. . .
		ca.crl.<CRL-Issuing-Point-Name>.autoUpdateInterval=1440
		. . .
	
ca.crl.<CRL-Issuing-Point-Name>.nextUpdateGracePeriod=5760
		. . .
		

Andrew

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20091105/ceddd579/attachment.htm>


More information about the Pki-users mailing list