OpenSAML user discussion

Title: CRL question

Hi all,

We have implemented with opensaml the authentication mechanism of our website. However, the time for the authentication is pretty long (it takes about 20 seconds). We would like to cache the CRLs in order not to connect to them every time via http.

One possible solution is of course to download them and heep them locally, but then we have the problem of the "next update" date. I mean, we have to update each CRL regularly or when "next update" indicates.

has anyone had this situation and found maybe a solution?

Thanks,
Miro