Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My Apache-based application running on my VPS has recently stopped serving SSL transactions.

I am getting errors like the following in the error_log:

[Tue Aug 24 12:39:00 2010] [warn] Found CRL is expired - revoking all certificates until you get updated CRL
[Tue Aug 24 12:39:00 2010] [error] Certificate Verification: Error (12): CRL has expired

Has anyone had this issue and know of a way of updating the CRLs?

System vitals: Ubuntu 8 Linux 2.6.18-028 Apache 2.2.8 OpenSSL 0.9.8g

share|improve this question

1 Answer 1

False alarm. I had created my own revocation list with openssl which I was using for client authentication and this had expired.

For anyone who is interested there is some great advice on implementing certificate based access control for your sites at:

http://it.toolbox.com/blogs/securitymonkey/howto-securing-a-website-with-client-ssl-certificates-11500

Just make sure your .crl does not expire ;-)

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.