[Freeipa-users] mastercrl.bin very old

[Natxo Asenjo]

hi,

On Mon, Nov 3, 2014 at 5:21 PM, Rob Crittenden <rcritten at redhat.com> wrote:
> Natxo Asenjo wrote:

>> How often does the crl list get generated? i still do not see recent data.
>
> This is controlled by ca.crl.MasterCRL.autoUpdateInterval which by
> default is 240, so every 4 hours.

mmm, still no new items in the https://kdc01.sub.domain.tld/ipa/crl/
site. Everything is stuck on june 28 2013.

Oh well, I can use mod_rewrite to send it to /ca/ee/ca/getCRL?op=getCRL&
>> crlIssuingPoint=MasterCRL where you get the latest crl.

Thanks,
--
Groeten,
natxo