Erwann Abalea <eabalea@gmail.com> wrote: > It considers that the CRL found at "hash".r0 isn't valid or sufficient to > give a revocation status of your certificate. > Could you post the subscriber certificate, its issuing CA cert, and the > corresponding CRL somewhere? I found the problem: it was not signed by the right CA (same private key, different cert) -- Emmanuel Dreyfus http://hcpnet.free.fr/pubz manu@netbsd.org