Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My Apache-based application running on my VPS has recently stopped serving SSL transactions.

I am getting errors like the following in the error_log:

[Tue Aug 24 12:39:00 2010] [warn] Found CRL is expired - revoking all certificates until you get updated CRL
[Tue Aug 24 12:39:00 2010] [error] Certificate Verification: Error (12): CRL has expired

Has anyone had this issue and know of a way of updating the CRLs?

System vitals: Ubuntu 8 Linux 2.6.18-028 Apache 2.2.8 OpenSSL 0.9.8g

share|improve this question

False alarm. I had created my own revocation list with openssl which I was using for client authentication and this had expired.

For anyone who is interested there is some great advice on implementing certificate based access control for your sites at:

Just make sure your .crl does not expire ;-)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.