[jboss-user] [Security & JAAS/JBoss] - Certificate Authentication question

[logicmason]

Hi All,

Can anybody tell me whether or not updating a CRL (by that I mean the actual CRL content, not the URL of it in the CA certificate) requires a JBoss restart?

I'm guessing no, since the whole point of it is to provide a completely independent mechanism for managing invalid certificates, and if many servers had the CA certificate (which specified a CRL URL) in their truststores, then each server would have to be restarted - I can't see that really being acceptable.

But paranoia prevails, and I have to ask the question :-)

Cheers,
'mason.

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4130322#4130322

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4130322