> Hmmm... yes, AFAIK OpenSSL doesn't cache the contents of files under
> SSLCARevocationPath, so this should work as a workaround. But, BTW, is it
> really a problem to do a graceful restart if a CRL changed?
Well, I'm not too familiar with a graceful restart... that is, what's the
effect
to a heavily visited website. Is it noticable? Are visitors receiving
unavailable
messages?
Thanks for your help!
Christian.
_____________________________________________
GlobalSign NV/SA http://www.globalsign.net
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]