https://blogs.damiendye.uk/en/tags/crl/ Recent content in Crl on Damien Dye's Blog Hugo en-GB Fri, 09 Oct 2026 18:20:00 +0100 https://blogs.damiendye.uk/en/certificates/step-ca-client-certificates-mtls/ Fri, 09 Oct 2026 18:20:00 +0100 https://blogs.damiendye.uk/en/certificates/step-ca-client-certificates-mtls/ Using step-ca to issue client certificates for mTLS, tested with nginx and Caddy. The 24-hour limit and how to raise it, a CRL that rejects everyone until its scope is fixed, the root CRL nginx needs, publishing CRLs over HTTP, the refresh job that stops them lapsing, and the PKCS12 file and CA certificates a phone needs.