Re: [Ejbca-develop] Question about CRL updater service

[Miguel A. T. A. <ml...@ed...>]

Thank you! 
It's always good to read the doc, hehe. So, it's wise not to have an overlap time shorter than the CRL updater period.

Tack så mycket!

El Lunes, 25 de Agosto de 2008 16:21:48 Johan Eklund escribió:
> Hola Miguel!
> 
> http://www.ejbca.org/manual.html#CRL%20generation has a pretty nice 
> description of this.
> 
> You are right about the assumption that no CRL will be generated in this 
> case. Increase the CRL Overlap time or the intensity of the CRL updater. 
> If you have a lot of certificates you will also have to take into 
> account the time it takes to generate the CRL.
> 
> Best Regards,
> Johan
> 
> Miguel Angel Tormo Alfaro skrev:
> > Hi all, I have a little question regarding periodic CRL issuing...
> > What effect can the parameter 'CRL overlap time' that can be set editing a CA have to the CRL updater service?
> > Imagine that the CRL overlap time is set to 10 minutes, and the CRL updater service has a 30 minutes period. 
> > So, if the CRL is going to expire at 3:30 for example, and the CRL updater is executed at 3:19, will the CRL updater service issue a CRL because it's about to expire before the next check or will the fact there is not enough time yet to cover the overlap time prevent the generation of a new CRL?
> >
> > Thanks!
> >
> > -------------------------------------------------------------------------
> > This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> > Build the coolest Linux based applications with Moblin SDK & win great prizes
> > Grand prize is a trip for two to an Open Source event anywhere in the world
> > http://moblin-contest.org/redirect.php?banner_id=100&url=/
> > _______________________________________________
> > Ejbca-develop mailing list
> > Ejb...@li...
> > https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> >   
> 
>