Share via

3.1.2.2 CRL Publication Retry Timer

  • Article

If a CRL publishing attempt, either by invocation of ICertAdminD::PublishCRL or ICertAdminD2::PublishCRLs, or as a result of automatic invocation via another timer, does not return "0", then the CA MUST set this retry timer to an interval of 10 minutes.

For each subsequent invocation of ICertAdminD::PublishCRL or ICertAdminD2::PublishCRLs that does not return "0", and for each subsequent CRL publishing retry attempt that does not result in a CRL_Publish_Status_Code of "0" for all CRLs, the CA MUST update the CRL Publication Retry Timer's next timeout value.

The logic that is executed when the timer reaches its next timeout value is specified in section 3.1.5.2.