Re: [squid-users] Re: SSL Client certificates

From: Alex van Denzel <alex.van.denzel_at_gmail.com>
Date: Wed, 2 Jul 2008 00:39:51 +0200

On Tue, Jul 1, 2008 at 12:26 PM, Henrik Nordstrom
<henrik_at_henriknordstrom.net> wrote:
> OpenSSL also supports a directory with multiple CRLs, hashed by the
> issuing CN, and dynamic updates.

Is the availability of files like "<hash>.r0" in the capath=<dir>
enough to turn CRL processing on, or is the VERIFY_CRL or
VERIFY_CRL_ALL option to sslflags= enough?

--
Alex.
Received on Tue Jul 01 2008 - 22:39:54 MDT

This archive was generated by hypermail 2.2.0 : Wed Jul 02 2008 - 12:00:01 MDT