Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 249

11. Disable any unused rules.
12. In the left menu, select the main Publishing folder, and, in the General tab, check the Enable
Publishing checkbox.
NOTE
Make sure that the Enable Default LDAP Connection option is not selected.
13. Edit the CA's server.xml file to point to the published CRL location as its docroot by adding a
new <Context line. For example:
vim /var/lib/pki-ca/conf/server.xml
<Server>
....
<!-- <Context docBase="webapps" path="/webapps" reloadable="false"/> -->
is commented out by default
<Context path="/ca/ee/ca/crl" docBase="/var/lib/pki-ca/webapps/ca/ee/ca/crl"
allowLinking="true"/>
</Host>
</Engine>
</Service>
</Server>
14. It can be beneficial to test the setup by interrupting a CRL download and then downloading the
partial CRL.
To emulate interrupting a CRL download, download a CRL and then remove blocks of it using dd:
Configuring CRL Publishing to Resume after Interrupted Downloads
this is the new line
this line
227