| |
Domain: Security: Certificate Revocation Checking: Certificate Authority Override: Configuration: CRL
Configuration Options Related Tasks Related Topics
This page allows you to configure the CRL (Certificate Revocation List) properties of this SSL certificate revocation checking certificate authority override.
Configuration Options
Name Description Enable Updates From Distribution Points For this CA, determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.
MBean Attribute:
CertRevocCaMBean.CrlDpEnabledDistribution Point URL For this CA, determines the CRL Distribution Point URL to use as failover or override for the URL found in the CRLDistributionPoints extension in the certificate.
MBean Attribute:
CertRevocCaMBean.CrlDpUrlDistribution Point URL Usage For this CA, determines how
getCrlDpUrlis used: as failover in case the URL in the certificate CRLDistributionPoints extension is invalid or not found, or as a value overriding the URL found in the certificate CRLDistributionPoints extension.MBean Attribute:
CertRevocCaMBean.CrlDpUrlUsageDownload Timeout (seconds) For this CA, determines the overall timeout for the Distribution Point CRL download, expressed in seconds.
The valid range is 1 thru 300 seconds.
MBean Attribute:
CertRevocCaMBean.CrlDpDownloadTimeoutMinimum value:
1Maximum value:
300
|