Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Publish New Certificate Revocation List (CRL) from Offline Root CA to sub CA

$
0
0

CRL on offline Root CA is expiring soon. Since this is standalone offline Root CA, CRL need to be published manually and copied to subordinate CA's. Could you please let me know the procedure to publish the CRL and what are the location that I need to publish the CRLs.

If I look into Extension's tab on Offline Root CA below are the locations mentioned.

<a href="http://crl.test.com/cdp/<CRLNameSuffix><DeltaCRLAllowed>.crl">http://crl.test.com/cdp/<CaName><CRLNameSuffix><DeltaCRLAllowed>.crl
C:\abc\CRL\<CaName><CRLNameSuffix><DeltaCRLAllowed>.crl

Keeping above information in mind, Do I need to publihs the CRL to AD as well?


Mahesh


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>