# Question about ssl CRL

**URL:** <https://www.ruby-forum.com/t/question-about-ssl-crl/223911>\
**Category:** NGINX\
**Created:** [October 23, 2012, 8:26am UTC](https://www.ruby-forum.com/t/question-about-ssl-crl/223911 "2012-10-23T08:26:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![aris](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/258eb7/32.png) [@aris](https://www.ruby-forum.com/u/aris)\
**Post date:** [October 23, 2012, 8:26am UTC](https://www.ruby-forum.com/t/question-about-ssl-crl/223911/1 "2012-10-23T08:26:04Z")

</div>

Hi

New to nginx, trying to setup a SSL reverse proxy. I have the SSL server  
and client setup working, but when I add in crl pem it fails

I downloaded the CRL from verisign converted from DER to PEM format and  
saved.

When I uncomment  
#ssl\_crl /var/www/dev.xyz.com/certs/crl.pem;  
My clients fail to connect, I get an 400 error !

Not sure what the issue is ?

Thanks  
Alex

{code}

server {  
listen 447 ssl;  
server\_name [dev.xyz.com](http://dev.xyz.com);

```
    ssl on;
    ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers 

```

AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5;  
ssl\_certificate /var/www/dev.xyz.com/certs/dev.xyz.com.crt;  
ssl\_certificate\_key /var/www/dev.xyz.com/certs/dev.xyz.com.key;  
ssl\_session\_cache shared:SSL:10m;  
ssl\_session\_timeout 10m;

```
    # 1.3.7
    #ssl_client_certificate 

```

/var/www/dev.xyz.com/certs/dev.xyz.com.AcceptableUserCertsCA;  
#ssl\_trusted\_certificate  
/var/www/dev.xyz.com/certs/dev.xyz.com.UserCertsCA;

```
    ssl_client_certificate 

```

/var/www/dev.xyz.com/certs/dev.xyz.com.UserCertsCA;  
#ssl\_crl /var/www/dev.xyz.com/certs/crl.pem;

```
    ssl_verify_client on;
    ssl_verify_depth 3;

access_log /var/log/nginx/dev.xyz.com.access.log main;
error_log /var/log/nginx/dev.xyz.com.error.log warn;

location / {
    root /var/www/dev.xyz.com/wwwroot/;
    index index.html index.htm;
    autoindex on;
}

```