Skip to content

Commit

Permalink
Merge branch 'patch-2' of https://github.com/lukasz-lobocki/docs into…
Browse files Browse the repository at this point in the history
… patch-2
  • Loading branch information
tashian committed Aug 29, 2024
2 parents 80417d7 + 4b226f4 commit c68b642
Showing 1 changed file with 3 additions and 5 deletions.
8 changes: 3 additions & 5 deletions step-ca/certificate-authority-server-production.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -180,7 +180,7 @@ You may require Active Revocation if you need immediate certificate revocation,
or if you are issuing long-lived certificates.
For this purpose,
`step-ca` contains a built-in,
minimalist Certificate Revocation List (CRL) server.
minimal Certificate Revocation List (CRL) server.

This section describes how to enable CRL for your intermediate CA and leaf certificates.

Expand Down Expand Up @@ -218,7 +218,7 @@ it can be rendered unusable by an attacker through revocation.

But there are downsides:
CRL adds a service dependency to your PKI.
Clients check the CRL endpoint on every new connections,
Clients check the CRL endpoint on every new connection,
adding significant latency to the TLS handshake,
and load on your CRL endpoint.

Expand Down Expand Up @@ -259,9 +259,7 @@ the CRL will be hosted at `/1.0/crl`.
"isCA": true,
"maxPathLen": 0
},
"crlDistributionPoints":
["http://ca.example.com/1.0/crl"]
}
"crlDistributionPoints": ["http://ca.example.com/1.0/crl"]
}
```

Expand Down

0 comments on commit c68b642

Please sign in to comment.