Maxim Dounin
March 07, 2017 08:38AM
Hello!

On Tue, Mar 07, 2017 at 08:18:02AM -0500, alweiss wrote:

> Hi Maxim
> For specific needs, if i don't add the ssl_crl directive to my ssl
> configuration, would nginx just don't check anything or would it issue a
> live query on the url indicated as a crl distribution point in the client
> certificate, introducing high latency ...?
>
> In other words, how to completely disable.crl checking on client
> authentication ?

CRL checking is only enabled when you explicitly load a CRL using
the ssl_crl directive. That is, CRL checking is disabled by
default, you don't need to do anything to disable it.

--
Maxim Dounin
http://nginx.org/
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Efficient CRL checking at Nginx

sandeepkolla99 December 15, 2014 02:48PM

Re: Efficient CRL checking at Nginx

Maxim Dounin December 15, 2014 03:30PM

Re: Efficient CRL checking at Nginx

sandeepkolla99 December 16, 2014 12:51PM

Re: Efficient CRL checking at Nginx

Maxim Dounin December 17, 2014 10:48AM

Re: Efficient CRL checking at Nginx

sandeepkolla99 December 17, 2014 11:18AM

Re: Efficient CRL checking at Nginx

alweiss March 07, 2017 08:18AM

Re: Efficient CRL checking at Nginx

Maxim Dounin March 07, 2017 08:38AM

Re: Efficient CRL checking at Nginx

alweiss March 07, 2017 09:01AM

Re: Efficient CRL checking at Nginx

alweiss June 18, 2019 11:19AM

Re: Efficient CRL checking at Nginx

Francesco Giacomini June 19, 2019 09:02AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 191
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready