From f8d071dad35b97016743041641d3877eb454bf45 Mon Sep 17 00:00:00 2001
From: Martin Kuba <makub@ics.muni.cz>
Date: Wed, 12 Jul 2023 13:15:25 +0200
Subject: [PATCH] enabled Certificate Revocation Lists checking

---
 templates/sites-enabled/perun.conf.j2 | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/templates/sites-enabled/perun.conf.j2 b/templates/sites-enabled/perun.conf.j2
index 9e88b2c..677f940 100644
--- a/templates/sites-enabled/perun.conf.j2
+++ b/templates/sites-enabled/perun.conf.j2
@@ -67,6 +67,8 @@ ShibCompatValidUser on
   SSLVerifyDepth 5
   SSLVerifyClient optional
   SSLOptions +LegacyDNStringFormat
+  SSLCARevocationCheck chain
+  SSLCARevocationPath /etc/grid-security/certificates/
 {% endif %}
 
   # Increasing limits on HTTP headers. Connector packetSize in Tomcat must be set to bigger value than ProxyIOBufferSize here.