diff options
| author | Werner Koch <[email protected]> | 2004-04-07 18:02:56 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2004-04-07 18:02:56 +0000 |
| commit | bd2d99c4e750b0529f4ebbcd4e8981a08ce97999 (patch) | |
| tree | 626156bdc19060e5cf6305ecf3e12b69db228671 | |
| parent | * gpgsm.c: New option --force-crl-refresh. (diff) | |
| download | gnupg-bd2d99c4e750b0529f4ebbcd4e8981a08ce97999.tar.gz gnupg-bd2d99c4e750b0529f4ebbcd4e8981a08ce97999.zip | |
Documented --force-crl-refresh
Diffstat (limited to '')
| -rw-r--r-- | doc/gpgsm.texi | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/doc/gpgsm.texi b/doc/gpgsm.texi index 24503a10b..977fe3c37 100644 --- a/doc/gpgsm.texi +++ b/doc/gpgsm.texi @@ -261,6 +261,16 @@ By default the @acronym{CRL} checks are enabled and the DirMngr is used to check for revoked certificates. The disable option is most useful with an off-line network connection to suppress this check. +@item --force-crl-refresh +@opindex force-crl-refresh +Tell the dirmngr to reload the CRL for each request. For better +performance, the dirmngr will actually optimize this by suppressing +the loading for short time intervalls (e.g. 30 minutes). This option +is useful to make sure that a fresh CRL is available for certificates +hold in the keybox. The suggested way of doing this is by using it +along with the option @code{--with-validation} for a ke listing +command. This option should not be used in a configuration file. + @item --enable-ocsp @itemx --disable-ocsp @opindex enable-ocsp |