On Wed, Dec 08, 1999, Christian Buysschaert wrote:
> > Hmmm... yes, AFAIK OpenSSL doesn't cache the contents of files under
> > SSLCARevocationPath, so this should work as a workaround. But, BTW, is it
> > really a problem to do a graceful restart if a CRL changed?
>
> Well, I'm not too familiar with a graceful restart... that is, what's the
> effect to a heavily visited website. Is it noticable? Are visitors receiving
> unavailable messages?
With a restart ("apachectl restart") you see broken requests for the time of
the restart, of course. With a graceful restart ("apachectl graceful") this
should not happen, because there the processes wait until they fulfilled the
request before they die.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
