CRL validation

[irfan sarwar]

Hi,

How do I ' Validate the certificates used in the assertion using
Certificate Revocation Lists (CRLs), as well as checking expiration'?

I've looked at the documentation here and looking to use the dynamic or
staticpkix engines:
https://wiki.shibboleth.net/confluence/display/SP3/PKIX+and+StaticPKIX+TrustEngines


<TrustEngine type="PKIX"/>
 Setting my TrustEngine to PKIX doesn't seem to do anything with CRL
(looking at the shibd.log  'debug logs')
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190822/2db251f3/attachment.html>