SSLCAPath
parameter specifies the name of
a directory containing CA root certificates that may be required to
validate TLS client certificates. Radiator looks for root certificates
first in SSLCAFile
, then in
SSLCAPath
, so there usually is no need to set both.
When Certificate Revocation List (CRL) checks are enabled, this directory
is also used by TLS library to look for CRL files.
Special
characters are supported.The certificates and CRLs must be in PEM format,
one per file. The file name has a special format. Setting up this
directory is described in Setting up this directory is described in
Section 3.11.3. TLS_CAPath.
Here is an example of
using SSLCAPath
:
SSLCAPath %D/cadirectory