vincent viard wrote: > I just want to know if the following statement is always true: > > "You will still need to restart FreeRADIUS after downloading a new CRL" OpenSSL doesn't allow for the dynamic reloading of CRLs. If your CRLs change often, use OCSP. Alan DeKok.