https://bz.apache.org/bugzilla/show_bug.cgi?id=66684

Michael Osipov <micha...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 OS|                            |All

--- Comment #1 from Michael Osipov <micha...@apache.org> ---
(In reply to DigitalCat from comment #0)
> Recently, we tested the use of the crLFile configuration (in server.xml) in
> the scenario where two-way certificate authentication is enabled. When the
> file pointed to by the crlFile configuration item is an empty file (the file
> exists but the file content is blank), Tomcat cannot provide services and
> SSL HandShake reports an error(certificate_unknown). When crlFile is not
> configured or the content in crlFile is correct, no error is reported.
> 
> I'm thinking that don't need to set the revocationEnabled parameter to true
> (In org.apache.tomcat.util.net.SSLUtilBase#getParameters 498L) when the file
> content is blank.

If you set a path and the file exists, Tomcat will use as-is. What do you
expect?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to