SSLCRLCHECK Parameter File Option

Specifies whether a Certificate Revocation List (CRL) is checked when a digital certificate is validated.

Valid in: spdsserv.parm parameter file
Default: NOSSLCRLCHECK
Applies to: UNIX and Windows platforms
Interaction: Used with SSLCLIENTAUTH.
See: Configuring Secure Sockets Communication

Syntax

SSLCRLCHECK | NOSSLCRLCHECK;

Required Arguments

SSLCRLCHECK

specifies that CRLs are checked when digital certificates are validated.

NOSSLCRLCHECK

specifies that CRLs are not checked when digital certificates are validated.

Details

A Certificate Revocation List (CRL) is published by a Certificate Authority (CA) and contains a list of revoked digital certificates. The list contains only the revoked digital certificates that were issued by a specific CA.
Last updated: February 3, 2017