How to set the CRLdp certificate extension to point to specific Web server to retrieve the CRL
Originally Published: 2004-08-25
Last Modified: 2023-10-06
Article Number
000060274
Applies To
Keon Certificate Authority 6.5.1
Issue
How to set the CRLdp certificate extension to point to specific Web server to retrieve the CRL
Resolution
Below is an example of a custom certificate profile which sets the CRL to specific URL of a external Web server. See the KCA documentation on Custom Certificate Profiles for more information on this feature.

{
  name : 'CRL Distribution Points',
  type : 'mandatory',
  autogenerate : false,
  noncritical : {
    def : false,
    editable : true,
    visible : true,
    type : 'mandatory'
  },
  cRLDistPointsSyntax : {
    def : 1,
    min : 1,
    max : 10,
    visible : true,
    editable : true,
    type : 'mandatory',
    elements : [
      {
        editable : true,
        visible : true,
        type : 'optional',
        distributionPoint : {
          def : 'fullName',
          editable : true,
          visible : true,
          type : 'mandatory',
          value : {
            min : 1,
            max : 10,
            def : 1,
            editable : true,
            visible : true,
            elements : [
              {
                def : 'uRI',
                editable : true,
                visible : true,
                type : 'mandatory',
                value : {
                  def : 'http://crl.something.com/mycamd5.crl',
                  editable : true,
                  visible : true,
                  type : 'mandatory',
                  validator : 'extCheckGenName(this)'
                }
              }
            ]
          }
        }
      }
    ]
  }
}

Related Articles

Trending Articles

Don't see what you're looking for?