Bug#785729: apache2: certificate revocation list checking is not working with default configuration from default-ssl.conf

[Jens Meißner <heptalium@gmx.de>]

Source: apache2
Version: 2.4.10-10
Severity: normal

Hello,

since apache 2.4 the additional configuration directive SSLCARevocationCheck is
required to get certificate revocation list (CRL) checking for client
certificates working. The default SSL configuration in default-ssl.conf
contains only the SSLCARevocationFile / SSLCARevocationPath directive, but this
directive no longer works alone. The default configuration should contain the
(commented out) directive "SSLCARevocationCheck chain".

Regards,
Jens