Crl-file causing SSL_ERROR_EXPIRED_CERT_ALERT

@mdconner wrote:

Using v1.8.10 on RHEL 7, I get the mentioned error in Firefox where the HTTPS frontend bind is as follows:

bind <IP>:443 name https ssl crt <server pem> ca-file <ca pem> verify required crl-file <x509>

I’m pretty confident the crt, ca and crl files are correct.

I get the same error using “verify optional”

If I add “crt-ignore-err all”, I get SSL_ERROR_UNKNOWN_CA_ALERT

If I add "crt-ignore-err all ca-ignore-err all ", I get “page isn’t redirecting properly. problem may be caused by disabling or refusing to accept cookies”

Without crl-file , the application works successfully.

Any ideas to correct or debug?

Posts: 1

Participants: 1

Read full topic