[32604] in Kerberos
CRL Distribution Points
daemon@ATHENA.MIT.EDU (Bram Cymet)
Thu Aug 26 09:18:40 2010
Message-ID: <4C7669AB.7020403@cbnco.com>
Date: Thu, 26 Aug 2010 09:18:35 -0400
From: Bram Cymet <bcymet@cbnco.com>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
HI,
Is there any way to set the pkinit_revoke setting in a realm to look at
the CRL distribution point in a certificate and download the CRL from
there automatically? This would avoid the need to distribute up to date
CRLs everywhere they are needed.
Yes I could write a script to get the CRL distribution point from the
cert and periodically download the CRL but I was wondering if kerberos
already has this feature built in?
Thanks,
--
Bram Cymet
Software Developer
Canadian Bank Note Co. Ltd.
Cell: 613-608-9752
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
