Hello Tim, Could you provide more information about your setup, like grpc stack (C++/Go), grpc version, how CRLs are generated, etc? In general, I'd like to encourage you to take a look how updated CRL functionality is organized and test certs/CRLs are generated for it (C++) - https://github.com/grpc/grpc/blob/master/test/core/tsi/test_creds/crl_data/README On Friday, February 9, 2024 at 7:09:39 PM UTC-5 Tim wrote:
> I'm trying to use a CRL to revoke a certificate. I've generated the CRL > and verified the cert is revoked with 'openssl verify -crl_check ...' and > it correctly outputs the cert is revoked. > > When I call options.set_crl_directory with the absolute path to the > directory the crl is in, when I connect I just get the log "Certificate > verification failed to find relevant CRL file." and allows the connection > to succeed. > > I have the CRL in both PEM and DER formats in the directory. Does the file > have to be a certain name in order for gRPC to find it? Or is there some > other reason it can't find it? > -- You received this message because you are subscribed to the Google Groups "grpc.io" group. To unsubscribe from this group and stop receiving emails from it, send an email to grpc-io+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/grpc-io/e094aeec-ff77-4909-90ce-b0ecbb98d544n%40googlegroups.com.
