Welcome! Log In Create A New Profile

Advanced

Validating client certificate against CRL

December 11, 2014 02:03PM
Hi,
My Nginx is setup for Mutual SSL and it works well for the below nginx configuration.
Hierarchy of certificates is RootCA
******************************** |
******************************** V
************************** IntermediateCA
******************************** |
******************************** V
***********************ClientCert ServerCert

listen 80;
listen 443 ssl;
server_name localhost;

ssl_certificate serverCert.pem;
ssl_certificate_key serverKey.key;
ssl_client_certificate RootCA.pem;
ssl_verify_client on;
ssl_verify_depth 2;

But If I add 'ssl_crl RootCACRL.pem' or 'ssl_crl IntermediateCRL.pem' to above configuration, I see the below error. By the way, RootCACRL.pem and IntermediateCRL.pem files doesn't have any revoked certificates.

400 Bad Request

The SSL certificate error
nginx/1.6.2


Can you please help me in this.


Regards,
Sandeep
Subject Author Posted

Validating client certificate against CRL

sandeepkolla99 December 11, 2014 02:03PM

Re: Validating client certificate against CRL

Maxim Dounin December 11, 2014 02:34PM

Re: Validating client certificate against CRL

nathanmesser March 12, 2015 01:28PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 248
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready