[Freeipa-devel] [PATCH] 255 publish CRLs

2009-08-24 Thread Rob Crittenden
This patch configures the CA to publish CRLs and makes that directory 
available via Apache so one can retrieve them. The URI will be /ipa/crl/


I made that directory indexable so one can pull delta CRLs or older ones 
if desired. There is always a symbolic link to the latest named 
MasterCRL.bin. I had to add some SELinux permissions to let Apache read 
these files.


rob


freeipa-255-crl.patch
Description: application/mbox


smime.p7s
Description: S/MIME Cryptographic Signature
___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Re: [Freeipa-devel] [PATCH] 255 publish CRLs

2009-08-24 Thread Simo Sorce
On Mon, 2009-08-24 at 13:44 -0400, Rob Crittenden wrote:
 
 This patch configures the CA to publish CRLs and makes that directory 
 available via Apache so one can retrieve them. The URI will
 be /ipa/crl/
 
 I made that directory indexable so one can pull delta CRLs or older
 ones 
 if desired. There is always a symbolic link to the latest named 
 MasterCRL.bin. I had to add some SELinux permissions to let Apache
 read 
 these files.

ack, awesome and so simple.

Simo.
-- 
Simo Sorce * Red Hat, Inc * New York

___
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel