Configuring CRL accessibility

Stop the Apache service using service apache2 stop.

Create a CertEnroll directory for crl in the /var/www/openxpki/ directory.

Set openxpki as the owner of this directory, and then configure the permissions to let Apache read and execute, and other services to read only.

• chown openxpki /var/www/openxpki/CertEnroll
• chmod 755 /var/www/openxpki/CertEnroll

Add a reference to the Apache alias.conf file using nano /etc/apache2/mods-enabled/alias.conf.

After the <Directory "/usr/share/apache2/icons"> section, add the following:

        	Alias /CertEnroll/ "/var/www/openxpki/CertEnroll/"
         	<Directory "/var/www/openxpki/CertEnroll">
               Options FollowSymlinks
               AllowOverride None
               Require all granted
         	</Directory>

Add a reference in the apache2.conf file using nano /etc/apache2/apache2.conf.

Add the following in the Apache2 HTTPD server section:

         	<Directory /var/www/openxpki/CertEnroll>
               Options FollowSymlinks
               AllowOverride None
               Allow from all
         	</Directory>

Start the Apache service using service apache2 start.