[Freeipa-users] mastercrl files

Martin Kosek mkosek at redhat.com
Wed Nov 11 20:24:49 UTC 2015


On 11/10/2015 10:59 PM, Fraser Tweedale wrote:
> On Tue, Nov 10, 2015 at 07:02:42PM +0100, Natxo Asenjo wrote:
>> hi,
>>
>> do we need to keep all the MasterCRL-YYYYMMDD-HHMMSS.der files or can we
>> purge them on a regular basis (say, keep 60 days dump the rest)?
>>
>> $ ls -l | wc -l
>> 3621
>>
>> this is in a server installed 3 years ago.
>>
>> --
>> Groeten,
>> natxo
>>
> Hi Natxo,
>
> You can purge them.  I am not sure why we keep the old ones around;
> can someone fill me in?

This was not touched loong ago. CCing Rob in case he has an idea, but if not - 
you are probably the best person to improve it :-)




More information about the Freeipa-users mailing list