I'm not sure if it is correct, but my root ca holds a crldistributionpoint and I have signed the certificates with it. I finally got my certificates working.
BUT
revocationEnabled doesn't do anything. Metro 1.4 is installed on glassfish prior to domain creation. The webserver where the crl stands shows no requests for the crl file.
So I gonna dig into it today. If you have any suggestions please let me know.
[Message sent by forum member 'jcstover' (jcstover)]
http://forums.java.net/jive/thread.jspa?messageID=321199