Radiator Server Documentation — v10.34.2

TLS connection rejected after CRL change

Emission

Log level: DEBUG

Per-request tracing: No

Promotion: WARN

Logged when an established TLS peer fails revalidation after a CRL change. Radiator Server closes the connection. The role, subject, and issuer fields identify the rejected peer certificate. The error describes the verification, policy, or revalidation task failure.

Check the peer certificate, the loaded CRLs, and the configured verification policy.