crlhelper(8)crlhelper(8)NAMEcrlhelper - Helper program used to store-and-forward CRLs
SYNOPSIScrlhelper <semid> <parentpid> <directory> [prefix]
DESCRIPTION
A helper program used by the Apache httpd mod_revocator plug-in to
store-and-forward CRLs from upstream to the various Apache processes in
the preform MPM. This saves each process from having to fetch the CRL
itself. This is not expected to be run by end-users.
The mod_revocator plug-in requires the mod_nss plug-in to also be reg‐
istered with this Apache httpd process.
Whenever an Apache httpd process configured to use the mod_revocator
plug-in is started, this program will be automatically invoked via ref‐
erence to the mod_revocator configuration file stored under
/etc/httpd/conf.d/revocator.conf which contains the following default
entry:
# CRL Helper:
# This helper program does the actual CRL retrieval
#
# NOTE: Located at '/usr/bin/crlhelper' prior
# to 'mod_revocator-1.0.3-16'.
#
CRLHelper /usr/libexec/crlhelper
OPTIONS
<semid>
The semaphore which corresponds to the mod_revocator plug-in
registered with the Apache httpd process during startup.
<parentpid>
The primary parent pid of the Apache httpd process into which
both the mod_nss and mod_revocator plug-ins have been loaded.
<directory>
Since the mod_revocator plug-in depends upon the mod_nss plug-in
being configured, this option specifies the destination direc‐
tory of the NSS databases that will be associated with this exe‐
cutable specified by the following entry in the mod_nss plug-
in's /etc/httpd/conf.d/nss.conf configuration file:
# Server Certificate Database:
# The NSS security database directory that holds the
# certificates and keys. The database consists
# of 3 files: cert8.db, key3.db and secmod.db.
# Provide the directory that these files exist.
NSSCertificateDatabase /etc/httpd/alias
[prefix]
Optional prefix to attach prior to the names of the NSS certifi‐
cate and key databases contained in the directory referenced by
the previous argument and specified by the following entry in
mod_nss plug-in's /etc/httpd/conf.d/nss.conf configuration file
(must be uncommented in order to be utilized):
# Database Prefix:
# In order to be able to store multiple NSS databases
# in one directory they need unique names. This option
# sets the database prefix used for cert8.db and key3.db.
#NSSDBPrefix my-prefix-
BUGS
Report bugs to http://bugzilla.redhat.com.
AUTHORS
Rob Crittenden <rcritten@redhat.com>.
COPYRIGHT
Copyright (c) 2013 Red Hat, Inc. This is licensed under the Apache
License, Version 2.0 (the "License"); no one may use this file except
in compliance with the License. A copy of this license is available at
http://www.apache.org/licenses/LICENSE-2.0.
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITH‐
OUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Rob Crittenden Jul 3 2013 crlhelper(8)
