You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2008/06/11 15:44:49 UTC

DO NOT REPLY [Bug 14104] not documented: must restart server to load new CRL

https://issues.apache.org/bugzilla/show_bug.cgi?id=14104





--- Comment #9 from Grzegorz <gr...@comp-css.pl>  2008-06-11 06:44:48 PST ---
Created an attachment (id=22109)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=22109)
Automatically reload CRL when the previous one expires and a new one is
available

With this patch applied, Apache will reload a certificate revocation list (CRL)
file, when
* previous CRL, stored in memory expired
* a new CRL file is available (based on file mtime)

It only works with CRLs loaded with SSLCARevocationFile, but if there's
interest, I'll extend it to support SSLCARevocationPath as well.

It doesn't require any additional options; Apache's behavior will not change if
you don't supply fresh CRLs. If you do, it will automagically reload them when
needed.


-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org