From 08fc563212faeca9aa4dc9339acedcac3751ca5d Mon Sep 17 00:00:00 2001
From: Rob Crittenden <rcritten@redhat.com>
Date: Mon, 24 Aug 2009 13:42:48 -0400
Subject: Generate CRLs and make them available from the IPA web server

---
 install/conf/ipa.conf | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'install/conf/ipa.conf')

diff --git a/install/conf/ipa.conf b/install/conf/ipa.conf
index 9656fdf3..5ca13d37 100644
--- a/install/conf/ipa.conf
+++ b/install/conf/ipa.conf
@@ -41,6 +41,9 @@ Alias /ipa/errors "/usr/share/ipa/html"
 # For the MIT Windows config files
 Alias /ipa/config "/usr/share/ipa/html"
 
+# For CRL publishing
+Alias /ipa/crl "/var/lib/pki-ca/publish"
+
 <Location "/ipa/xml">
   AuthType Kerberos
   AuthName "Kerberos Login"
@@ -72,6 +75,13 @@ Alias /ipa/config "/usr/share/ipa/html"
   Allow from all
 </Directory>
 
+<Directory "/var/lib/pki-ca/publish">
+  AllowOverride None
+  Options Indexes FollowSymLinks
+  Satisfy Any
+  Allow from all
+</Directory>
+
 # Protect our CGIs
 <Directory /var/www/cgi-bin>
   AuthType Kerberos
-- 
cgit