https://issues.apache.org/bugzilla/show_bug.cgi?id=46531


ParvanParvanov <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|INVALID                     |




--- Comment #2 from ParvanParvanov <[email protected]>  2009-01-16 
10:23:59 PST ---
Certificate, which is Not revoked and Not expired.

When I remove the line with the revoked User certificate with Serial
No.00 from openssl's index.txt and generate a new CRL,
put it on the Apache and restart Apache,
the situation is normal again, the Apache behaves well, granting (or
denying) access to the site as appropriate.

It seems to me improper Apache to deny access to the site on the
grounds of revoked User certificate with Serial No.00, just because
the Server certificate has the same SerialNo. 00.

Both the Server certificate and the CA Certificate (used to create the
User Certificates and put on the Apache to check them) are
self-signed.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to