> Hmmm... yes, AFAIK OpenSSL doesn't cache the contents of files under
> SSLCARevocationPath, so this should work as a workaround.  But, BTW, is it
> really a problem to do a graceful restart if a CRL changed?

Well, I'm not too familiar with a graceful restart... that is, what's the
effect
to a heavily visited website. Is it noticable? Are visitors receiving
unavailable
messages?

Thanks for your help!
Christian.

_____________________________________________
GlobalSign NV/SA     http://www.globalsign.net


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to