Added hint about updating Debian SSO CRL / update-sso-ca

This commit is contained in:
Christoph Haas 2018-08-22 13:10:49 +02:00
parent 0207cb194b
commit 56750c3884

View file

@ -127,3 +127,14 @@ bundle exec rake debshots:remove_broken_screenshots
bundle exec rake debshots:remove_duplicate_images
# Frequent update of Debian SSO certificate
Run /etc/nginx/update-sso-ca regularly to update the CA certificate and the CRL.
The CRL (certificate revocation list) is only valid for three days. So make sure
you have a daily cron job for the updates. Do not forget to restart Nginx afterwards.
Otherwise you will end up with this error message:
400 Bad Request
The SSL certificate error
nginx