In nano /etc/openxpki/config.d/realm/democa/profile/default.yaml, update the following:
- crl_distribution_points: section
critical: 0
uri:
- https://FQDN of the est/openxkpi/CenrtEnroll/[% ISSUER.CN.0 %].crl
- ldap://localhost/[% ISSUER.DN %]
- authority_info_access: section
critical: 0
ca_issuers: http://FQDN of the est/download/MYOPENXPKI.crt
ocsp: http://ocsp.openxpki.org/
Change the IP address and CA certificate name according to your CA server.
Note: The authority_info_access (AIA) path is saved in the Download folder, but you can set the location according to your preference.