This patch configures the CA to publish CRLs and makes that directory available via Apache so one can retrieve them. The URI will be /ipa/crl/

I made that directory indexable so one can pull delta CRLs or older ones if desired. There is always a symbolic link to the latest named MasterCRL.bin. I had to add some SELinux permissions to let Apache read these files.


rob

Attachment: freeipa-255-crl.patch
Description: application/mbox

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to