Skip to content

Commit

Permalink
Clarify fetch-crl has to be done externally
Browse files Browse the repository at this point in the history
  • Loading branch information
Fabian Mauchle committed Sep 25, 2019
1 parent 10033d2 commit a508aea
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions radsecproxy.conf.5
View file
Original file line number Diff line number Diff line change
Expand Up @@ -777,13 +777,17 @@ This can be specified multiple times.

.BR "CRLCheck (" on | off )
.RS
Enable checking peer certificate against the CRL (default off).
Enable checking peer certificate against the CRL (default off).
.br
Note that radsecproxy does not fetch the CRLs itslef. This has to be done
separately, e.g. with
.BR fetch-crl (8)
.RE

.BI "CacheExpiry " seconds
.RS
Specify how many \fIseconds\fR the CA and CRL information should be cached. By
default, the CA and CRL are loaded at startup and cached indefinetely. after the
default, the CA and CRL are loaded at startup and cached indefinetely. After the
configured time, the CA CRL are re-read. Alternatively, reloading the CA and CRL
can be triggered by sending a SIGHUP to the radsecproxy process. This option may
be set to zero to disable caching.
Expand Down

0 comments on commit a508aea

Please sign in to comment.