[Pki-users] Resolvable CRL Distribution Points in the certificate

[Jain, Mahendra]

Hi,

I’ve DogTag 10.1.2 setup in my environment.

I updated the caServerCert profile to support CRL Distribution Points configuration via pkiconsole.

After I issued the new server cert, the CRL Distribution Points are included in the cert as expected shown below:

----------------------------------------------------------------------------
….

Extension: CRL Distribution Points (2.5.29.31)
Critical: no
URI:http://crl.example-domain.com/master.crl
----------------------------------------------------------------------------

What is the step that needs to be done so that DogTag can publish/generate CRL at the above url so that it can be downloadable/accessible by client?

Thanks,
Mahendra
“This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed, and may contain information that is non-public, proprietary, privileged, confidential and exempt from disclosure under applicable law or may be constituted as attorney work product. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this message in error, notify sender immediately and delete this message immediately.”
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pki-users/attachments/20150624/7492f63b/attachment.htm>