<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>I’m able to resolve this by following steps outlined in the link below:</div>
<div><a href="https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/crls-http.html">https://access.redhat.com/documentation/en-US/Red_Hat_Certificate_System/8.1/html/Admin_Guide/crls-http.html</a></div>
<div><br>
</div>
<div>- Mahendra</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><Jain>, "Jain, Mahendra" <<a href="mailto:majain@verisign.com">majain@verisign.com</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, June 24, 2015 at 10:07 AM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:pki-users@redhat.com">pki-users@redhat.com</a>" <<a href="mailto:pki-users@redhat.com">pki-users@redhat.com</a>><br>
<span style="font-weight:bold">Subject: </span>[Pki-users] Resolvable CRL Distribution Points in the certificate<br>
</div>
<div><br>
</div>
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">Hi,</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">I’ve DogTag 10.1.2 setup in my environment. </font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">I updated the caServerCert profile to support CRL Distribution Points configuration via pkiconsole. </font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">After I issued the new server cert, the CRL Distribution Points are included in the cert as expected shown below:</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">----------------------------------------------------------------------------</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">….</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;">
<div><font face="Verdana">Extension: CRL Distribution Points (2.5.29.31)</font></div>
<div><font face="Verdana"><span class="Apple-tab-span" style="white-space:pre"></span>Critical: no </font></div>
<div><font face="Verdana"><span class="Apple-tab-span" style="white-space:pre"></span><b>URI:<a href="http://crl.example-domain.com/master.crl">http://crl.example-domain.com/master.crl</a></b></font></div>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">----------------------------------------------------------------------------</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana"><br>
</font></div>
<div><font face="Verdana">What is the step that needs to be done so that DogTag can publish/generate CRL at the above url so that it can be </font><span style="font-family: Verdana; font-size: 14px;">downloadable/accessible by client?</span></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">Thanks,</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px;"><font face="Verdana">Mahendra</font></div>
<h5><font color="gray">“This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed, and may contain information that is non-public, proprietary, privileged, confidential and exempt from disclosure
under applicable law or may be constituted as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this
message in error, notify sender immediately and delete this message immediately.”
</font></h5>
<font color="gray"></font></div>
</div>
</span>
</body>
</html>