Thanks for the clarity. Basicly what you tell me is, in order to make checking a CRL is to make sure the certificates include an CRLDistributionPoints extention and if I put in that location the crl file so it can be downloaded it works.
Well I can live with that so I gonna try it. Using a file is not that good anyway. Just one question, is the CRL cached or retrieved each time a certificate is checked?
Thanks
Johan
[Message sent by forum member 'jcstover' (jcstover)]
http://forums.java.net/jive/thread.jspa?messageID=320800