[Pki-users] CRL Distribution point

[Fraser Tweedale]

On Wed, Dec 23, 2015 at 12:23:01PM +0000, Sam Elliott wrote:
> Hi,
> 
> I maybe missing something here, but I have configured CRL distribution
> point within the certificate profile, and this shows up within generated
> certificates, but when I setup the CRL issuing distribution point it
> doesn't seem to have any affect.
> 
> I have enabled it, configured pointType to DirectoryName and then pointName
> to crl/master.crl, after revoking some certs I try downloading the CRL but
> get a 404, not sure if I am missing something with the configuration?
> 
> Regards,
> Sam
> 
Hi Sam,

"DirectoryName" is for an X.500 distinguished name (i.e. an LDAP DN
where the CRL can be found according to RFC 4523 schema).

If you want HTTP access use "URIName" and the apprpriate HTTP URI.

If you need more assistance please show the relevant part of your
profile config.

Cheers,
Fraser