Yes i was raising concerns on crlFile I can understand that tomcat reads the sever.xml on startup only and that is a limitation we might have to live with it. However, i could not understand the behavior of CRL once next update expires. It is blocking all connections simply because it could not verify the CRL. I am really hoping there is already a patch or workaround for this. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4166256#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...