IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

Setting
the
maximum
number
of
cache
entries
The
gsk-crl-cache-size
parameter
specifies
the
maximum
number
of
entries
in
the
GSKit
CRL
cache.
Each
entry
represents
an
entire
CRL
for
a
particular
Certificate
Authority.
The
default
setting
is
″0″.
A
value
greater
than
″0″
is
required
to
activate
the
cache.
When
gsk-crl-cache-size
and
gsk-crl-cache-entry-lifetime
are
both
set
to
″0″
(default),
CRL
caching
is
disabled.
[ssl]
gsk-crl-cache-size
=
0
Setting
the
GSKit
cache
lifetime
timeout
value
The
gsk-crl-cache-entry-lifetime
parameter
specifies
the
lifetime
timeout
value
for
all
entries
in
the
GSKit
CRL
cache.
The
value
is
expressed
in
seconds
and
can
have
a
range
of
0-86400
seconds.
When
gsk-crl-cache-size
and
gsk-crl-cache-entry-
lifetime
are
both
set
to
″0″
(default),
CRL
caching
is
disabled.
[ssl]
gsk-crl-cache-size
=
0
232
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide