Project

General

Profile

Actions
Copy link

Feature #4579

open

Add support for CRL

Added by Pavel Kácha almost 6 years ago. Updated almost 6 years ago.

Status:
New
Priority:
Normal
Assignee:
Pavel Kácha
Category:
Server
Target version:
Future
Start date:
01/21/2019
Due date:
% Done:

0%

Estimated time:

Description

Add cron scripts and example configuration for Apache to obey CRL.

CESNET CRL is at https://crl.cesnet-ca.cz/Warden_CA.crl

Files

getcrl.sh (6.49 KB) getcrl.sh Pavel Kácha, 01/21/2019 03:03 PM
Actions
Copy link
 #1

Updated by Pavel Kácha almost 6 years ago

Note that Apache is very strict - if CRL is configured, but CRL file is unreadable/broken, Apache will insist that ALL related certificates are listed. Attached script does some hoops and dances to avoid that.

Actions
Copy link

Also available in: Atom PDF