security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-02-01 16:33:02 +01:00
Code Activity

Documented --force-crl-refresh

Browse Source
This commit is contained in:
Werner Koch 2004-04-07 18:02:56 +00:00
parent c61c77b1b2
commit bd2d99c4e7
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
doc/gpgsm.texi
View File

@ -261,6 +261,16 @@ By default the @acronym{CRL} checks are enabled and the DirMngr is used
to check for revoked certificates. The disable option is most useful to check for revoked certificates. The disable option is most useful
with an off-line network connection to suppress this check. with an off-line network connection to suppress this check.
@item --force-crl-refresh
@opindex force-crl-refresh
Tell the dirmngr to reload the CRL for each request. For better
performance, the dirmngr will actually optimize this by suppressing
the loading for short time intervalls (e.g. 30 minutes). This option
is useful to make sure that a fresh CRL is available for certificates
hold in the keybox. The suggested way of doing this is by using it
along with the option @code{--with-validation} for a ke listing
command. This option should not be used in a configuration file.
@item --enable-ocsp @item --enable-ocsp
@itemx --disable-ocsp @itemx --disable-ocsp
@opindex enable-ocsp @opindex enable-ocsp