Secure Shell Support for Large CRLs

From: Gulden, Michael (michael.gulden@lmco.com)
Date: 03/31/03

  • Next message: Sriram S. - CTD, Chennai.: "RE: Question on how to set up client browser -> DMZ machine -> po rt f orwarded to port 80 on LAN machine?" 
    Date: Mon, 31 Mar 2003 16:36:10 -0500
From: "Gulden, Michael" <michael.gulden@lmco.com>
To: "'secureshell@securityfocus.com'" <secureshell@securityfocus.com>

    I am working with the DoD using their PKI. They have large CRLs - currently
    about 1 Mbyte, expecting that some may hit 4 Mbyte before long. Anyone
    familiar with Secure Shell implementations that
    1) support large CRLs
    2) manage CRL caches well, so that we don't kill the network continually
    fetching 4 Mbyte CRLs from the several CAs we have??

    Thanks,
    Mike

    Michael Gulden, CISSP
    Secure Enterprise Solutions Engineering
    Phone 703-367-6442 Fax 703-367-3312
    Email michael.gulden@lmco.com

  • Next message: Sriram S. - CTD, Chennai.: "RE: Question on how to set up client browser -> DMZ machine -> po rt f orwarded to port 80 on LAN machine?"