Domain: Security: Certificate Revocation Checking: CRL
Configuration Options Related Tasks Related Topics
This page allows you to configure the CRL (Certificate Revocation List) SSL certificate revocation checking properties for this domain.
Configuration Options
Name Description Enable Updates From Distribution Points Determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.
MBean Attribute:
CertRevocMBean.CrlDpEnabled
Cache Refresh Period (percent) Determines the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL.
For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.
The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).
The valid range is 1 through 100.
MBean Attribute:
CertRevocMBean.CrlCacheRefreshPeriodPercent
Minimum value:
1
Maximum value:
100
Distribution Point Download Timeout (seconds) Determines the overall timeout for the Distribution Point CRL download, expressed in seconds.
The valid range is 1 thru 300 seconds.
MBean Attribute:
CertRevocMBean.CrlDpDownloadTimeout
Minimum value:
1
Maximum value:
300