how to update CRLs

Hi,

 

 

I'm trying to setup Certificate Revocation List support for checking the validity of client certificates. The configuration manual warns (on page 7-26) to keep the CRLs up to date, or else all certificates will be rejected.

 

However the manual does not mention how to do so automatically.

 

Is there a way to update CRLs using iControl?

 

Or should I write a cron script? In that case, how do I activate the new CRL once I put it in /config/ssl/ssl.crl?

 

 

Thanks in advance,

 

 

Bastiaan Bakker

 

Senior Software Engineer

 

E.Novation LifeLine Networks bv