Recommendation on publishing the CRL

[tmontney]

The only way, as far as I can tell, is to run a cronjob to regularly export the CRL (and then copy it to a web server). If that's the case, is there a reason why XCA doesn't have a feature to do this (whether daily or when a certificate is revoked)?

Looking at it more, I hadn't actually gone through the process of revocation. Seems you revoke it, then generate a CRL. Not the end of the world for an extra step each time you revoke (especially since revocation shouldn't happen all that often). But, still, it would be nice to see CRL generation have the option of being automatic.

I figure something would have to go here and here. This seems to be the best function for exporting the CRL, as other export functions seem tied to whatever the UI is displaying. (I would figure that CLI logic should go in its own function but unsure which library to put it in.) Then, of course, the UI needs to be updated (adding a checkbox and a file dialog browser button and a textbox).