Hi,

I m using  crl but it is woking only in the case of using CRLfile.

That is when I use the CRLfile , the client having the revoked certificate is now not able to connect to the server.

But when I m providing the CRLpath in the stunnel config file , the client is still able to connect.

That is CRL is working in the case of CRLfile entry and  not working in the case of CRLpath.

The entry that i have specified is

So where is the flaw.

I know that in case of the CRLfile , it is necessary to restart the stunnel , whenever the CRL changes. But in case of CRLpath , whether it is necessary to restart the stunnel or not.

 

regards

piyush