diff options
| author | Rob Austein <sra@hactrn.net> | 2010-05-13 00:13:28 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2010-05-13 00:13:28 +0000 |
| commit | d48cec99dc6287562c1ab3be50ca61b746ca1429 (patch) | |
| tree | 8437e25635d3ba854580029fe069994558dea5ea /rpkid/doc/Left-Right | |
| parent | 1c9fbe2b3dd58c5a1ef08a184a2f639fe303843f (diff) | |
Try to avoid stale CRLs and manifests, by using self.regen_margin as
lead time for regenerating them. I suppose some day we might need to
control lead time for these separately from ROA EE certificates, but
seems unlikely.
svn path=/rpkid/doc/Left-Right; revision=3248
Diffstat (limited to 'rpkid/doc/Left-Right')
| -rw-r--r-- | rpkid/doc/Left-Right | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/rpkid/doc/Left-Right b/rpkid/doc/Left-Right index ba626d84..54502d7e 100644 --- a/rpkid/doc/Left-Right +++ b/rpkid/doc/Left-Right @@ -70,7 +70,8 @@ Payload data which can be configured in a <self/> object: Positive integer representing how long before expiration of an RPKI certificiate a new one should be generated, measured in seconds. At present this only affects the one-off EE certificates associated with - ROAs. + ROAs. This parameter also controls how long before the nextUpdate time of + CRL or manifest the CRL or manifest should be updated. bpki_cert (element): BPKI CA certificate for this <self/>. This is used as part of the |