From 56750c3884b2a173a3a2e8048a22144fec3222aa Mon Sep 17 00:00:00 2001 From: Christoph Haas Date: Wed, 22 Aug 2018 13:10:49 +0200 Subject: [PATCH] Added hint about updating Debian SSO CRL / update-sso-ca --- doc/README.Installation.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/doc/README.Installation.md b/doc/README.Installation.md index 9ff3af2..41d2258 100644 --- a/doc/README.Installation.md +++ b/doc/README.Installation.md @@ -127,3 +127,14 @@ bundle exec rake debshots:remove_broken_screenshots bundle exec rake debshots:remove_duplicate_images +# Frequent update of Debian SSO certificate + +Run /etc/nginx/update-sso-ca regularly to update the CA certificate and the CRL. +The CRL (certificate revocation list) is only valid for three days. So make sure +you have a daily cron job for the updates. Do not forget to restart Nginx afterwards. + +Otherwise you will end up with this error message: + + 400 Bad Request + The SSL certificate error + nginx