Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 200 / 564

Chapter 6. Revoking Certificates and Issuing CRLs
178
•
Update the CRL at
. This field sets a daily time when the CRL should be updated. To specify
multiple times, enter a comma-separate list of times, such as
01:50,04:55,06:55
.
•
Update the CRL every
. This checkbox enables generating and publishing CRLs at the
interval set in the field. For example, to publish CRLs every day, select the checkbox, and
enter
1440
in this field.
•
Next update grace period
. If the Certificate Manager updates the CRL at a specific
frequency, the server can be configured to have a grace period to the next update time to
allow time to create the CRL and publish it. For example, if the server is configured to update
the CRL every 20 minutes with a grace period of 2 minutes, and if the CRL is updated at
16:00, the CRL is updated again at 16:18.
5. The
Cache
tab sets whether caching is enabled and the cache frequency.
Figure 6.3. CRL Cache Tab
•
Enable CRL cache
. This checkbox enables the cache, which is used to create delta CRLs. If
the cache is disabled, delta CRLs will not be created. For more information about the cache, see
Section 6.1, “About Revoking Certificates”
.
•
Update cache every
. This field sets how frequently the cache is written to the internal
database. Set to
0
to have the cache written to the database every time a certificate is revoked.
•
Enable cache recovery
. This checkbox allows the cache to be restored.
6. The
Format
tab sets the formatting and contents of the CRLs that are created. There are two
sections,
CRL Format
and
CRL Contents
.