Viewing KRLs

1. Log in to the Stream Administration Interface.

2. Go to OpenSSH > KRL.

3. You can then see information regarding your CAs' KRLs that are going to be detailed below:

  • The CA column indicates the name of the CA whose KRL is detailed in the line

  • The Number column indicates the serial number of the KRL. It starts at 1 for the very first KRL generated and is incremented by 1 at each generation. It is displayed in hexadecimal format.

  • The Last update column indicates the date and time when the current KRL was generated.

  • The Next refresh column indicates the date and time when the current KRL will be refreshed. It should be equal to the nearest date matching either cron quartz expression you set in the KRL policy field (lazy or hard).

  • The download download_krl button allows you to download your KRL. It also serves as a KRLDP. For more information about KRLDPs in Stream, please refer to next section.

  • The generate generate_krl button allows you to manually refresh the KRL and generates a new one.

  • The refresh refresh_krl button refreshes the information displayed in the tab, in case a generation happened in between. It does not refresh the KRLs, only the displayed information.