Nginx关于ssl设置crl的问题

[yizi...@gmail.com]

开启ssl，并设置证书链后，可正常登陆，

  ssl on;

  ssl_verify_depth 2;

  ssl_certificate /opt/CA2/server.crt;

  ssl_certificate_key /opt/CA2/server.key;

  ssl_client_certificate /opt/CA2/ca.crt;

  #ssl_crl /opt/CA2/testca.crl;

  ssl_verify_client on;

  ssl_protocols SSLv3 TLSv1;

  ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;

  ssl_prefer_server_ciphers on;

但是加入crl清单，报错如下：

client SSL certificate verify error: (3:unable to get certificate CRL) while reading client request headers

请教大家我该如何修改配置？