domi wrote: [Question about CRLs] > <VirtualHost _default_:443> > ServerName 192.168.0.2:443 > Errorlog /opt/exampleca/ssl_error_log > Transferlog /opt/exampleca/ssl_access_log > > SSLEngine on > > SSLCipherSuite HIGH:MEDIUM > > SSLProtocol all > > SSLCertificateFile /some/path/01.pem > SSLCertificateKeyFile /some/path/testkey.pem > SSLCertificateChainFile /some/path/cacert.pem > > </VirtualHost> You are missing a SSLCARevocationFile directive. Apache should check the CRL, not the browser. Joost --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|