Re: distinguish between revoked and expired certificates

Wegener, Norbert wrote:

Is it possible to distinguish between expired and revoked certificates and assign a special vlan in the first case while rejecting the user in the second one? As in both cases the certificate is invalid, I suppose the answer is no.

Both will cause Access-Reject. :)

The probably best way would be to organize the the renewal of certificates appropriately.

Yes. And that can be hard. Alan DeKok.