This patch configures the CA to publish CRLs and makes that directory available via Apache so one can retrieve them. The URI will be /ipa/crl/

I made that directory indexable so one can pull delta CRLs or older ones if desired. There is always a symbolic link to the latest named MasterCRL.bin. I had to add some SELinux permissions to let Apache read these files.


Attachment: freeipa-255-crl.patch
Description: application/mbox

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Freeipa-devel mailing list

Reply via email to