Certificate Revocation List in Tomcat6
问题 I have implemented Client Authentication to my Tomcat Server. I have distributed client X509 certificates and JKS which were generated using my own CA crt and openSSL. Now i want to use CRL to block some of my clients. How to add a CRL to tomcat?...I dont find any help from Google on this. 回答1: Am answering my own question..In tomcat connector tag you have crlFile parameter which can be generated using openssl. The commands looks some thing like this openssl ca -config openssl.my.cnf -revoke