Apache Reference: mod_ssl, SSLCARevocationPath

SSLCARevocationPath

Directory of PEM-Encoded CA Certificate Revocation Lists (CRL)
Syntax: SSLCARevocationPath A
Example: SSLCARevocationPath etc/ssl/
Since: Apache 1.3

This directive sets the directory where you keep the X.509 certificate revocation lists (CRLs) of certification authorities, which are used to reject revoked certificates. The files in this directory must be PEM-encoded and are accessed through hash file names. Typically, you have to place the CRL files there and then create symbolic links with the help of the Makefile in the ssl.crl/ directory that comes with mod_ssl to accomplish this task.