TLSCARevocationFile

Name

TLSCARevocationFile -- Define a file with your CA revocation certifcates

Synopsis

TLSCARevocationFile [ CA revocation filename]

Default

Define a file holding your Certificate Revocation Lists

Context

server config, <Global>, <VirtualHost>

Module

mod_tls

Compatibility

1.2.7rc1 and later

Description

The TLSCARevocationFile directive configures one file that can contain the Certificate Revocation Lists (CRL) of Certification Authorities (CA) for your clients. These CRLs are used during the verification of client certificates, if presented. Such a file is merely the concatenation of the various PEM-encoded CRL files, in order of preference. This directive can be used in addition to, or as an alternative for, TLSCARevocationPath.

See also

TLSCARevocationPath

Examples

TLSCARevocationFile /etc/ftpd/ca-crl-bundle.pem