<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 11/05/09 13:27, Veale, Sean wrote:
<blockquote
cite="mid:5E904A528F23FA469961CECAC5F41787020A0DF8@NDHMC4SXCH.gdc4s.com"
type="cite">
<meta http-equiv="Content-Type"
content="text/html; charset=ISO-8859-1">
<meta name="Generator"
content="MS Exchange Server version 6.5.7654.12">
<title>Crl Generation question</title>
<!-- Converted from text/rtf format -->
<br>
<p><font face="Arial" size="2">Hi, </font>
</p>
<p><font face="Arial" size="2">Is is possible for to configure a CA
so the CRLs are generated every X time (say every 1 day) but Next
Update specified for a longer time, say every 5 days?</font></p>
<p><font face="Arial" size="2">If so, how do you do that? </font>
<br>
<br>
<font face="Arial" size="2">Thanks<br>
Sean</font>
</p>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Pki-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Pki-users@redhat.com">Pki-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-users">https://www.redhat.com/mailman/listinfo/pki-users</a>
</pre>
</blockquote>
<br>
Yes, you can configure CA <br>
<blockquote>through CA console<br>
<blockquote>to "Update CRL ever: 1440 minutes"<br>
with "Next update grace period: 5760 minutes"<br>
</blockquote>
or through CS.cfg <br>
<blockquote>. . .<br>
ca.crl.<<i>CRL-Issuing-Point-Name</i>>.autoUpdateInterval=1440<br>
. . .<br>
ca.crl.<<i>CRL-Issuing-Point-Name</i>>.nextUpdateGracePeriod=5760<br>
. . .<br>
</blockquote>
</blockquote>
Andrew<br>
</body>
</html>