Certificate Revocation List configuration properties

Enable CRL Checks (com.soa.crl.enabled)

Enable CRL check for all X509 certification verification

Default: true

Fail on Error (com.soa.crl.failOnError)

If there is any error when retrieving a CRL list for an issuer then all corresponding certificates will be revoked.

Default: false

CRL Cache Refresh Interval (com.soa.crl.cacheRefreshInterval)

Interval in seconds to refresh the CRL cache.

Default: 600