Domain: Security: Certificate Revocation Checking: CRL

This page allows you to configure the CRL (Certificate Revocation List) SSL certificate revocation checking properties for this domain.

Name Description

Name	Description
Enable Updates From Distribution Points	Determines whether the CRL Distribution Point processing to update the local CRL cache is enabled. MBean Attribute: `CertRevocMBean.CrlDpEnabled`
Cache Refresh Period (percent)	Determines the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL. For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour. The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time). The valid range is 1 through 100. MBean Attribute: `CertRevocMBean.CrlCacheRefreshPeriodPercent` Minimum value: `1` Maximum value: `100`
Distribution Point Download Timeout (seconds)	Determines the overall timeout for the Distribution Point CRL download, expressed in seconds. The valid range is 1 thru 300 seconds. MBean Attribute: `CertRevocMBean.CrlDpDownloadTimeout` Minimum value: `1` Maximum value: `300`

Determines whether the CRL Distribution Point processing to update the local CRL cache is enabled.

Determines the refresh period for the CRL local cache, expressed as a percentage of the validity period of the CRL.

For example, for a validity period of 10 hours, a value of 10% specifies a refresh every 1 hour.

The validity period is determined by the CRL, and is calculated as the (next reported update time) - (this update time).

The valid range is 1 through 100.

Minimum value: 1

Maximum value: 100

Determines the overall timeout for the Distribution Point CRL download, expressed in seconds.

The valid range is 1 thru 300 seconds.

Minimum value: 1

Maximum value: 300

Administration Console Online Help