![]() ![]() ![]() ![]() |
Domain: Security: Certificate Revocation Checking: Certificate Authority Override: Configuration: CRL
This page allows you to configure the CRL (Certificate Revocation List) properties of this SSL certificate revocation checking certificate authority override.
Configuration Options
Name Description Enable Updates From Distribution Points For this CA, determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.
MBean Attribute:
CertRevocCaMBean.CrlDpEnabled
Distribution Point URL For this CA, determines the CRL Distribution Point URL to use as failover or override for the URL found in the CRLDistributionPoints extension in the certificate.
MBean Attribute:
CertRevocCaMBean.CrlDpUrl
Distribution Point URL Usage For this CA, determines how
getCrlDpUrl
is used: as failover in case the URL in the certificate CRLDistributionPoints extension is invalid or not found, or as a value overriding the URL found in the certificate CRLDistributionPoints extension.MBean Attribute:
CertRevocCaMBean.CrlDpUrlUsage
Download Timeout (seconds) For this CA, determines the overall timeout for the Distribution Point CRL download, expressed in seconds.
The valid range is 1 thru 300 seconds.
MBean Attribute:
CertRevocCaMBean.CrlDpDownloadTimeout
Minimum value:
1
Maximum value:
300
![]() |