Re: crlFile update

2013-11-12 Thread Daniel Mikusa
On Nov 12, 2013, at 1:54 PM, Christopher Schultz wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Dan, > > On 11/12/13, 10:10 AM, Daniel Mikusa wrote: >> On Nov 12, 2013, at 5:56 AM, Ja kub wrote: >> >>> Hello, >>> >>> Is there any way to revoke certificate without restarting

Re: crlFile update

2013-11-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Dan, On 11/12/13, 10:10 AM, Daniel Mikusa wrote: > On Nov 12, 2013, at 5:56 AM, Ja kub wrote: > >> Hello, >> >> Is there any way to revoke certificate without restarting tomcat >> ? >> >> http://tomcat.apache.org/tomcat-7.0-doc/config/http.html

Re: crlFile update

2013-11-12 Thread Daniel Mikusa
On Nov 12, 2013, at 5:56 AM, Ja kub wrote: > Hello, > > Is there any way to revoke certificate without restarting tomcat ? > > http://tomcat.apache.org/tomcat-7.0-doc/config/http.html : > crlFile The certificate revocation list to be used to verify client > certificates. > > is this file relo

Re: crlFile update

2013-11-12 Thread Marek Jagielski
Soon I will stand in front of the same problem. I think to implement my own TrustManager checking certificates by myself. I've found (still not checked) an example here: http://forum.spring.io/forum/spring-projects/web/117374-how-to-write-a-x509-custom-trust-manager-for-validating-the-client Trust

crlFile update

2013-11-12 Thread Ja kub
Hello, Is there any way to revoke certificate without restarting tomcat ? http://tomcat.apache.org/tomcat-7.0-doc/config/http.html : crlFile The certificate revocation list to be used to verify client certificates. is this file reloaded by tomcat, or it is read only once at startup ? regards J