On 06.10.09 02:49, Henry Nebrensky wrote:
> The TACAR site is much easier for what I'm trying to achieve, as I'd
> give the user a short list of CAs (UK eScience - VOMS server; GermanGrid
> - GGUS; SAM; CIC) and tell them to go to the URL and click the relevant
> "install" buttons, but that site only installs the certificates, not the
> CRLs - is that a problem?
EU Grid PMA recommends updating CRLs daily or more frequently.
In Firefox the UI is pretty poor: you need to go to Preferences >
Advanced > Encryption > Revocation Lists, then "import" the CRL from a
file (e.g. a .r0 file downloaded with fetch-crl) and then you can set a
daily update schedule.
David
--
Dr David O'Callaghan
Research Fellow - Grid-Ireland - e-INIS - Computer Architecture & Grid
School of Computer Science & Statistics,
Trinity College, Dublin 2, Ireland Telephone: +353 1 896 1536
|