3:unable to get certificate CRL
janet at wifispark.com
Thu Mar 12 16:25:08 UTC 2015
Hi Nginx Team
I'm having problems configuring NGINX to use a CRL.
I've created the CRL using OpenSSL 0.9.8e and my Nginx version is 1.4.1.
I'm using a self-signed certificate and an intermediate certificate.
The lines for the SSL in my config are:
> listen 10446 ssl;
> ssl_session_cache shared:SSL:10m;
> ssl_session_timeout 10m;
> ssl_prefer_server_ciphers on;
> ssl_certificate /etc/nginx/ssl/star_net.crt;
> ssl_certificate_key /etc/nginx/ssl/star_net.key;
> ssl_client_certificate /etc/certs/ca-chain.cert.pem;
> ssl_crl /etc/certs/crl.cert.pem;
> ssl_verify_client on;
> ssl_verify_depth 2;
If I comment the ssl_crl line, I don't get any errors.
However as soon as I uncomment it I get this error:
..... client SSL certificate verify error: (3:unable to get certificate
> CRL) while reading client request headers, client: ....
I can't see what is wrong in my config. Help please.
Thanks very much
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the nginx