again me. i got idea that i need crl but i didn't understand where it should be located? (and yes i read wiki but still...)
from config above u can see my certs location: ssl_ca =
so i did next command for cacert and mail cert: openssl ca -gencrl -crldays 3650 -keyfile mail/mx.office.dev.key -cert mail/mx.office.dev.crt -out mail/mx.office.dev.crl openssl ca -gencrl -crldays 3650 -keyfile private/cakey.pem -cert cacert.pem -out cacert.crl
so for that momment i had: /etc/pki/CA/cacert.pem /etc/pki/CA/cacert.crl and /etc/pki/CA/mail/mx.office.dev.crt /etc/pki/CA/mail/mx.office.dev.crl
still no luck ...geting "Invalid certificate: unable to get certificate CRL:" and they are in .Pem format, but i still renamed them into "cacert.crl.pem" and "mx.office.dev.crl"
no luck....
Pleaseeeeee, how to make this work ?