Determining CRLDistDirPath

If the protocol for the URI you specified with CRLDistURIn is HTTP protocol, you need to also determine your value for the CRLDistDirPath parameter. The CRLDistDirPath parameter specifies the full path of the var directory where PKI Services saves each DP CRL. The value can be specified with or without the trailing slash. The default value is /var/pkiserv/. If you are customizing this value for a CA Domain, you should specify a directory name that contains the CA Domain name, for example /var/pkiserv/employees/. In a case such as this, it is also necessary to add an additional Pass statement to the HTTP configuration file that maps the virtual path name in the URI to the real path specified by this CRLDistDirPath statement.

Statements in the pkiserv.conf file:

CRLDistURI1 = http://www.bankxyz.com/Employees/cacerts/
CRLDistDirPath = /var/pkiserv/employees/

Matching AliasMatch HTTP directive in the vhost80.conf (host file for non-SSL request) configuration file.

Uncomment the AliasMatch HTTP directive in the vhost80.conf (host file for non-SSL request) configuration file.

#AliasMatch /Employees/cacerts/(.*) /var/pkiserv/employees/$1

The default value is /var/pkiserv/. See Specifying the URI format. This value is ignored if you do not create a CRLDistributionPoints extension or if the URI protocol is LDAP.