Yes, mode 1 should address the case of missing CRL. Perhaps @bbockelm means an automatic check? I am not sure this is possible, also because the CA certificate gives a CRL distribution point. Can we close this? -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/716#issuecomment-443787452 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1