On Oct 18, 2004, at 9:01 PM, Michael Brown wrote: > Help! We don't want to have to restart stunnel every time we remove a > user. It's perfectly okay. You should add a CRL to CRLpath instead of removing a certificate from CApath. Best regards, Mike