Follow-up Comment #3, sr #124285 (project xrootd): Hi Brian, Of course I will check the behavior! Sorry if that was not clear from my post ... There is also a long-awaited optimization client-side which I will try to do as well. Yes, -crl:2 should reject if the certificate is not present. Gerri _______________________________________________________ Reply to this item at: <http://savannah.cern.ch/support/?124285> _______________________________________________ Message sent via/by LCG Savannah http://savannah.cern.ch/