CRLOverlap time limited to 12 hours?
Hi,
http://technet.microsoft.com/en-us/library/cc731104.aspx clearly states that the overlap time for CRLs ist limited to a maximum of 12 hours. Examples in literature say otherwise,
e.g. 2 weeks in Brian Komar. Is this limitation a fact and if so, why?
Technically, it appears no problem to specify e.g. 2 days. The contents of the generated CRLs (next publication versus next update) seem to be correct. Perhaps someone can shed some light on this?
Thanks - Stef
November 23rd, 2010 10:31am
This is true for Delta CRLs, but not for Base CRLs.http://en-us.sysadmins.lv
Free Windows Admin Tool Kit Click here and download it now
November 23rd, 2010 10:43am
Stef,
There's no "absolute" maximum Base CRL overlap period (within the bounds of reason)... it can be equivalent to your Base CRL validity period... but never greater.
e.g. you could have a twenty-six week Base CRL and a corresponding twenty-six week Base CRL Overlap period.
Cheers, Dave
November 24th, 2010 5:00pm