23.3. Changing the CRL update interval

Procedure

1. Stop the CRL generation server:

   # systemctl stop pki-tomcatd@pki-tomcat.service

2. Open the /var/lib/pki/pki-tomcat/conf/ca/CS.cfg file, and change the ca.crl.MasterCRL.autoUpdateInterval value to the new interval setting. For example, to generate the CRL every 60 minutes:

   ca.crl.MasterCRL.autoUpdateInterval=60

   注記

   If you update the ca.crl.MasterCRL.autoUpdateInterval parameter, the change will become effective after the next already scheduled CRL update.

3. Start the CRL generation server:

   # systemctl start pki-tomcatd@pki-tomcat.service