Configuring Extended Updated Intervals For Crls In Cs.cfg - Red Hat CERTIFICATE SYSTEM 7.2 - ADMINISTRATION Administration Manual
Hide thumbs
Also See for CERTIFICATE SYSTEM 7.2 - ADMINISTRATION:
- Manual (240 pages) ,
- Reference manual (337 pages) ,
- Release note (24 pages)
Table of Contents
Advertisement
Chapter 13. Revocation and CRLs
5. Save the changes.
13.5.2. Configuring Extended Updated Intervals for CRLs in CS.cfg
Two parameters need to be configured for setting the full/delta CRL publishing interval in the CS.cfg
file, ca.crl.extendedNextUpdate and ca.crl.MasterCRL.updateSchema.
1. Stop the CA server.
/etc/init.d/rhpki-ca stop
2. Open the CA configuration directory.
cd /var/lib/subsystem_name/conf
3. Edit the CS.cfg file, and add two lines to set the extended updated interval:
ca.crl.extendedNextUpdate=false
ca.crl.MasterCRL.updateSchema=3
The default interval is 1, meaning a full CRL is published every time a CRL is published. The
updateSchema interval can be set to any integer.
4. Restart the CA server.
/etc/init.d/rhpki-ca start
302
Advertisement
Table of Contents
Need help?
Do you have a question about the CERTIFICATE SYSTEM 7.2 - ADMINISTRATION and is the answer not in the manual?
Questions and answers