https://bz.apache.org/bugzilla/show_bug.cgi?id=66684
--- Comment #11 from DigitalCat <digital...@huawei.com> --- Configure crlFile="server.crl" in the server.xml file. Use the curl -ivk --cert server.crt --key server.key -X GET 'https://XXXXXX:8542' is used to check the certificate status. If you need to use the file provided by me for verification, enter PEM pass phrase in the command, which is "3er4#ER$". You can also use my crl production guide to verify, I will reply on the next floor. server.crl -----BEGIN X509 CRL----- MIIB0DCBuQIBATANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJoaDELMAkGA1UE CAwCaGgxCzAJBgNVBAcMAmhoMQswCQYDVQQKDAJoaDELMAkGA1UECwwCaGgxCzAJ BgNVBAMMAmhoMREwDwYJKoZIhvcNAQkBFgJoaBcNMjMwODMxMDkwNTMwWhcNMjMw OTMwMDkwNTMwWjAUMBICAQEXDTIzMDgzMTA5MDUxNlqgDjAMMAoGA1UdFAQDAgEA MA0GCSqGSIb3DQEBCwUAA4IBAQCsl1qNlrb1FTNTJOCyvUcBt6d0kN6BiQmT+EqZ axr6QsWNRYEaCVZkK9yZmx41Doi2bXSGdCdqeZB0wTlgGRnmoQeF2z1OhAbDR108 qDe40SVoQUmJBo7E3ORBAbzgOPP9p/9//Exh56EEf1mLMRMgr56FFo2pVomR3enU +58cS8vqngCCW68Rw06nCI0nIW+0D+xj3pUq7rRCpQua/cEIyUy5H1DwnePeD911 py4wvTSKzvj6o9hqp7k3JeVZKQBrNNh9eTro6lNYPxQMkFMjjeVIq0fIf/uHqN3J FCtYRJf6GyPnrEJ9yG/wmtEla/WWqcvy2TjGxttPCb1o7zwt -----END X509 CRL----- server.key -----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,7BA90C6B2A68FBA2 2oW7Wcs31h0k+ozTf66CGBEZkUCG9d32dHwQY8XLrNBW2rHlQ/or+tY/qQmuquUa fSYYskPyGhqdQQzKqe1ETis9K/c3nAt1M6d4EeB2xDlNqwZ7IZBC/6nbJX53woJP 6IPoTMn+ONEuq6+t4pvDv0tyxP8Lpb840Tm3aag4NffKMfArU89AHlMrD024h3ez nE6zQs+5yuIskp26l4Ui9oK0cBom0xqQCmbUcQpo1SKVvz8+7s2RFu1XuVGvMdeC knPyTV9ssZp7UHChSG5p0IrHdtFCbPQEuKm/bXA4PanvUFmTrp483pb0lyaHaJFG 1WrQQpF0YnKwPL5MLbXieKUnc/CgHPxMtCzbtdWRGqov9DetyDV557VtRNcD3bI8 9t7vryoVUIXBlsXSQKYVHGDUp/NhtuS1vuUXX8oWpDlZz9zEqSoKuEGbOw0+CMBa bShiQ9Cz4JzPzT4M7wHwm2SatoQLVLSYScSeFnTBdsNR/JebwC7e3Yzm6bx9fNJV U+LSD4EocQCq811mgaNqAC74F2J3BWxDH6VeKb6InWkK7zR5rWdIdfd0OKty7qCW uQliCnHvnkMZCPTIAdQ8v2IeDsT5/fJE8H/vcLBRODgQuWuWk5O2X2PUG/R+eut2 rz9yFBNemz6RpDtaPIuwVv8+UnbqTh45H71l5XghIAe8yth2mL3f72YnO0MFeerr C+bAKPiMX7nDxWzTcSDN1GY+sLlnpJPrtmZ1IGRS35R+s5dQee/hozupxEgmLnTK dY1X2cHhFtew+SkXY/7t4lPbmvnNR7wK8ngdZhwxx+XD4+Ig+tZ4KU45CiuUXU9s kjPCWqZaQSE69DpOUtgQk08wey01iVS+O0kR6CCbawCPaA2sLSman3eLRUHtUjBj gJY9wI4Vme81O0adkj0CUpYMTWiK+NVVL73FF8u70h7bA4kaNdegKj9E6BxjUWCL crupuie5aYnR2P94I4sCibsSigJekqkSJCLPNDIXClObw0xPm0jO9UmmY2ZGnuHg WuYY69MS5edSM/4mgUwFjyGDj4RrRQ4PSXVGTzwDenww/f1TlOQAAVhxSX+fWwK+ MEF8bFHaoBZf7tSsKm/MWkar5yxDwAtdYymljmzRqAcZqlFDCAvRaHupaK8QqPAl +ixvpy2NEbzAT8pnjnyLdix0hc/QhAsgzLIFXK8yPDzEZlV40iicy0HVUsg9tgd/ lpszCayHXUsSXAjRHohToFmbR91G+V+WB1lErvttBVsY6rbBcS0RMDwwyzZeMlU0 vhdLynHHS8QqNT+wmA5BQF4kH5AUfR5ypvDLWLUQn24/flTHijVNac32k7naXNiO r4BD1MZNvG4ISwx8rPTjt8U14a6HitTaa2GLYf9Q8ERhPiIpKGgSYsACgNaQUKbG 9cDeufoH2Y8YBxZY/vSpQyf8CZqx7LnCzQ5pW+AoRN54NsSNM3yQs8yCUSf+e+1g PY15wwoi7i2eRjulPXYbi3jwkkaUAQB5p8NazSK6JYkTOlWYxFk5tCB5f2coF8AQ q+oRXdMypb4FHMGdvbsQn/f6YH5gcqm4Qs5LxFmtZjw1zbEJho1lULZuYkd2/MHX -----END RSA PRIVATE KEY----- server.crt Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: C=hh, ST=hh, L=hh, O=hh, OU=hh, CN=hh/emailAddress=hh Validity Not Before: Aug 31 08:39:44 2023 GMT Not After : Sep 30 08:39:44 2023 GMT Subject: C=hh, ST=hh, O=hh, OU=hh, CN=hh/emailAddress=hh Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:54:28:6f:76:72:5a:37:45:a7:5b:59:8a:18: ab:a4:28:15:0a:23:8e:5b:df:71:77:81:e4:dd:c2: 4e:e3:0c:1a:86:44:62:07:d7:ad:19:95:b6:62:cd: 39:6d:d8:21:27:da:4e:3e:42:70:ef:1e:45:79:d9: 2d:a6:50:c7:06:2a:c3:5c:9c:67:55:43:e6:ec:b8: 20:a8:f9:38:f0:7e:28:ff:76:cf:99:ca:75:db:cd: 11:10:a6:fe:f6:b1:77:e6:85:f7:51:99:6c:82:8d: cf:d4:b7:c2:4d:68:00:32:44:bb:14:a2:1f:50:e2: 34:88:59:82:81:2a:0b:cc:0c:d6:01:b5:aa:51:fa: c9:79:0c:b3:af:c7:56:17:ac:c0:d8:51:c7:57:81: 96:53:82:37:70:5b:c4:0e:9e:6a:7f:d7:f2:ea:6b: 98:c4:06:de:f6:8a:5b:69:ee:21:49:e6:4e:9a:46: 3d:fc:d9:4a:81:2a:e3:61:ba:e5:7b:57:89:a1:f4: 89:6c:42:ce:92:0e:aa:19:81:00:3d:9a:50:1b:4d: 8a:66:5f:67:80:7f:16:3e:a0:0c:91:46:88:01:c5: 0f:bb:0b:7b:72:30:70:22:c8:d0:8f:f0:a7:f7:da: 9f:aa:6b:43:f4:c7:8c:5f:0d:76:21:75:2c:65:5b: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE Netscape Comment: OpenSSL Generated Certificate X509v3 Subject Key Identifier: 32:E2:1B:8B:0C:5D:B6:89:95:84:BF:65:DD:F8:0A:D0:4F:1E:52:AE X509v3 Authority Key Identifier: keyid:82:66:B2:C8:9D:50:EA:8B:E7:5B:F3:87:B4:42:A4:0D:7E:9D:6E:0A Signature Algorithm: sha256WithRSAEncryption 98:21:b3:d7:66:ae:ea:a3:d6:79:23:f7:da:5e:21:13:77:5d: 5b:69:e6:a3:13:c5:5e:2c:de:ce:ef:04:76:7e:dc:19:71:6e: 85:f6:fe:34:b6:17:a5:38:9e:30:8c:a3:05:11:35:1d:cb:81: a6:d7:3c:b5:39:03:a8:fe:64:29:64:62:e4:16:5f:b2:53:82: 25:71:3b:88:45:f8:92:1d:40:d5:5c:fd:b2:0b:37:fe:bb:c4: 05:a3:77:64:47:b2:6b:dd:84:3c:0a:02:96:75:00:42:32:56: c2:47:26:c1:b9:b5:4d:31:00:c3:e7:dc:5d:65:bc:f1:b4:ed: 28:11:3b:2f:82:2b:9c:ad:76:5c:28:b8:dc:3a:1e:b1:c1:79: 12:df:79:c8:76:69:9b:25:b9:5c:76:8b:dd:58:d2:74:92:ef: 37:2a:54:1d:31:6d:3d:54:ad:a5:6e:65:3b:f0:a0:74:d3:f3: 79:92:16:cc:49:ad:27:f8:7e:ca:d7:7a:ef:b2:d9:39:e8:82: 81:df:5f:46:99:c2:f9:e0:a0:f1:13:b8:2f:31:ae:b6:cb:98: f3:3e:d6:1a:b5:80:d2:49:dd:09:6f:de:bc:42:d2:0a:5f:a2: 24:5d:87:fd:1a:92:10:ae:4d:d8:90:08:86:a8:85:c6:aa:e0: 33:c7:5e:05 -----BEGIN CERTIFICATE----- MIIDqzCCApOgAwIBAgIBATANBgkqhkiG9w0BAQsFADBhMQswCQYDVQQGEwJoaDEL MAkGA1UECAwCaGgxCzAJBgNVBAcMAmhoMQswCQYDVQQKDAJoaDELMAkGA1UECwwC aGgxCzAJBgNVBAMMAmhoMREwDwYJKoZIhvcNAQkBFgJoaDAeFw0yMzA4MzEwODM5 NDRaFw0yMzA5MzAwODM5NDRaMFQxCzAJBgNVBAYTAmhoMQswCQYDVQQIDAJoaDEL MAkGA1UECgwCaGgxCzAJBgNVBAsMAmhoMQswCQYDVQQDDAJoaDERMA8GCSqGSIb3 DQEJARYCaGgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VChvdnJa N0WnW1mKGKukKBUKI45b33F3geTdwk7jDBqGRGIH160ZlbZizTlt2CEn2k4+QnDv HkV52S2mUMcGKsNcnGdVQ+bsuCCo+Tjwfij/ds+ZynXbzREQpv72sXfmhfdRmWyC jc/Ut8JNaAAyRLsUoh9Q4jSIWYKBKgvMDNYBtapR+sl5DLOvx1YXrMDYUcdXgZZT gjdwW8QOnmp/1/Lqa5jEBt72iltp7iFJ5k6aRj382UqBKuNhuuV7V4mh9IlsQs6S DqoZgQA9mlAbTYpmX2eAfxY+oAyRRogBxQ+7C3tyMHAiyNCP8Kf32p+qa0P0x4xf DXYhdSxlW29nAgMBAAGjezB5MAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8WHU9w ZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBQy4huLDF22iZWE v2Xd+ArQTx5SrjAfBgNVHSMEGDAWgBSCZrLInVDqi+db84e0QqQNfp1uCjANBgkq hkiG9w0BAQsFAAOCAQEAmCGz12au6qPWeSP32l4hE3ddW2nmoxPFXizezu8Edn7c GXFuhfb+NLYXpTieMIyjBRE1HcuBptc8tTkDqP5kKWRi5BZfslOCJXE7iEX4kh1A 1Vz9sgs3/rvEBaN3ZEeya92EPAoClnUAQjJWwkcmwbm1TTEAw+fcXWW88bTtKBE7 L4IrnK12XCi43DoescF5Et95yHZpmyW5XHaL3VjSdJLvNypUHTFtPVStpW5lO/Cg dNPzeZIWzEmtJ/h+ytd677LZOeiCgd9fRpnC+eCg8RO4LzGutsuY8z7WGrWA0knd CW/evELSCl+iJF2H/RqSEK5N2JAIhqiFxqrgM8deBQ== -----END CERTIFICATE----- -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
