[Freeipa-devel] [PATCH] 255 publish CRLs

Rob Crittenden rcritten at redhat.com
Mon Aug 24 17:44:31 UTC 2009


This patch configures the CA to publish CRLs and makes that directory 
available via Apache so one can retrieve them. The URI will be /ipa/crl/

I made that directory indexable so one can pull delta CRLs or older ones 
if desired. There is always a symbolic link to the latest named 
MasterCRL.bin. I had to add some SELinux permissions to let Apache read 
these files.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-255-crl.patch
Type: application/mbox
Size: 9101 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090824/10a1450c/attachment.mbox>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090824/10a1450c/attachment.bin>


More information about the Freeipa-devel mailing list