[Freeipa-users] Revocation of Issuing CA certificates

[Kamal Perera]

Dear All,


How is the revocation of issuing CA certificates are handled? We are using
OCSP responders for revocation checking of certificates issued by the
Issuing CAs. So do we have to setup another OCSP or CRL distribution point
to let the applications to query for the revocation of issuing CA
certificates?

Regards,
Kamal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20150506/00dca8ee/attachment.htm>