Currently pki-core fails to connect to check CRL on the remote machine. https://bugzilla.redhat.com/show_bug.cgi?id=702020
This is not an IPA bug. This is a remote Apache server unable to retrieve the CRL using mod_revocator because the remote machine is misconfigured.
Metadata Update from @dpal: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 3.0 Core Effort Backlog
Login to comment on this ticket.