There is only a patch for the NTP software from
http://phk.freebsd.dk/patch/ntpd.patch. We are going to wait for a full
released and tested version of NTP to be released from http://www.ntp.org/.
Until that time, we are blocking NTP access from the Internet (for those of
us who use Internet strat
I'd have to say though that the CDP field works rather well. I run a rather
large set of CAs. When we were just using the monolithic CRL, each client
takes a long time to do verification of certificates. When we switched to
the distribution point extension, verification checking time fell
consi
