From bd2d99c4e750b0529f4ebbcd4e8981a08ce97999 Mon Sep 17 00:00:00 2001 From: Werner Koch Date: Wed, 7 Apr 2004 18:02:56 +0000 Subject: [PATCH] Documented --force-crl-refresh --- doc/gpgsm.texi | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/doc/gpgsm.texi b/doc/gpgsm.texi index 24503a10b..977fe3c37 100644 --- a/doc/gpgsm.texi +++ b/doc/gpgsm.texi @@ -261,6 +261,16 @@ By default the @acronym{CRL} checks are enabled and the DirMngr is used to check for revoked certificates. The disable option is most useful with an off-line network connection to suppress this check. +@item --force-crl-refresh +@opindex force-crl-refresh +Tell the dirmngr to reload the CRL for each request. For better +performance, the dirmngr will actually optimize this by suppressing +the loading for short time intervalls (e.g. 30 minutes). This option +is useful to make sure that a fresh CRL is available for certificates +hold in the keybox. The suggested way of doing this is by using it +along with the option @code{--with-validation} for a ke listing +command. This option should not be used in a configuration file. + @item --enable-ocsp @itemx --disable-ocsp @opindex enable-ocsp