Novell LINUX ENTERPRISE SERVER 11 - SECURITY Manual page 223

Figure 17.4 YaST CA Module—Extended Settings
5 Change the associated value on the right side and set or delete the critical setting
with critical.
6 Click Next to see a short summary.
7 Finish your changes with Save.
NOTE
All changes to the defaults only affect objects created after this point. Already
existing CAs and certificates remain unchanged.
17.2.6 Creating CRLs
If compromised or otherwise unwanted certificates should be excluded from further
use, they must first be revoked. The procedure for this is explained in
"Creating or Revoking a Sub-CA"
or Revoking User Certificates"
be created and published with this information.
(page 204) (for sub-CAs) and
(page 206) (for user certificates). After this, a CRL must
Section 17.2.3,
Section 17.2.4, "Creating
Managing X.509 Certification 209