path: root/README.md
diff options
Diffstat (limited to 'README.md')
1 files changed, 18 insertions, 4 deletions
diff --git a/README.md b/README.md
index 97c8c62..3a46116 100644
--- a/README.md
+++ b/README.md
@@ -100,14 +100,28 @@ private key, and the root certificate. The password is embedded in the file
name. The file should be renamed when using out-of-band delivery for the
-## Setting Up CRL Distribution Point
+## Setting Up a CRL Distribution Point
-In this example, the CA host serves also as the CRL distribution point. It is
-assumed that `crl.example.com` resolves to the IP address of that host.
+In this example, the CA host serves also as the master CRL distribution point.
+In addition, there may be other distribution points which periodically mirror
+the CRL from the CA host. It is assumed that `ca.example.com` resolves to the
+CA host and `crl.example.com` resolves to the IP addreses of all distribution
-Execute the following commands on the CA host to set up CRL distribution:
+Install the CRL distribution point package on the target host (CA host or
<pre>apk add dmvpn-crl-dp
+If setting up a mirror, configure the master distribution point by creating a
+file named `/etc/dmvpn-crl-dp.conf` with the following contents:
+Activate CRL distribution by executing the following commands:
rc-update add lighttpd
rc-service lighttpd start