Hi,

I have justed tested the use of CRLs.

When the SSLCARevocationFile points at a CRL, which is not signed by the
CA, whose certificate is given in SSLCACertificateFile, no errors are
generated in the logs, and clients are allowed access.

Has anyone experienced the same behaviour? Is it a wellknown
feature/bug, even though I found no information on the subject in the
mailing list archive? 

-- 
Carsten Raskgaard
Tele Danmark Internet
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to