CRL Responder

Contents

Overview

This filter allows Enterprise Gateway to behave as a CRL (Certificate Revocation List) responder, returning CRLs to clients. The filter imports the CRL from a specified URL. It can then be configured to periodically retrieve the CRL from this URL to ensure that it always has the latest version of it.

Configuration

Configure the following fields on the CRL Responder screen:

Name:
Enter a name for the filter in this field.

CRL Import URL:
Enter the full URL of the CRL that you want to return to clients. Alternatively, you can browse to the location of the CRL file by clicking the browse button to the right of the field provided.

Automatic CRL Update Preferences:
Since keeping up-to-date with the latest list of revoked certificates is crucial in any trust network, it is important that you configure the filter to retrieve the latest version of the CRL on a regular basis. The following automatic update options are available:

  • Do not update:
    The CRL will not be automatically updated.
  • Update on "next update" date:
    The CRL published by the CA contains a Next Update date, which indicates the next date on which the CA will publish the CRL. You can choose to dynamically retrieve the updated CRL on the Next Update date by selecting this option. This effectively synchronizes the server with the CA updates.
  • Update every number of days:
    The CRL will be updated after the number of days specified here has elapsed, for example, every "3" days.
  • Trigger update on cron expression:
    A cron expression can be entered here to determine when to perform the automatic update.