How to activate the certificate revocation list I created

[Josh Hiner]

Just wondering if anyone out there is able to provide any feedback on 
this? Sorry to bother. I just cant find any consistent documentation or 
examples out there. I have the crl created, just need to know how to 
implement the crl.pem correctly.

Thanks!

> Hello, I have been searching for documentation on activating a 
> certificate revocation list I just created with openssl. It is a 
> crl.pem signed by my ca cert. I just need freeradius to reference it 
> so that the one certificate I revoked gets denied on authentication.
>
> Here is what I have so far in my eap.conf (I am running freeradius 
> 2.1.3 on REHL)
>
> crl_file = ${raddbdir}/certs/makecertificates/issued/crl.pem
> check_crl = yes
> CA_path = ${raddbdir}/certs/makecertificates/issued/
>
> Are these lines correct? Are any lines I have up there unnecessary? 
> Also, do I need to have my CA certificate in the same directory as the 
> crl.pem file? It seems to hint towards that in the eap.conf file.
>
> Thanks for any help
>
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
>