I can configure Apache to authenticate users with client certificate and validate them via OCSP. Do you know how can I redirect the user to a custom html page if the certificate is revoked? The maximum I have achieved is getting a SSL error, which work fine but it is not user friendly.
I was thinking with SSLVerifyClient optional_no_ca and rewrite rules, but I don't know exactly how to do it.
Thanks.
