title: How can I verify client certificates against a CRL in Golang?
body: <p>I'm using the <code>ClientCAs</code> and <code>ClientAuth</code> options in <code>tls.Config</code> to do cert-based client authentication in my Go HTTP application. Is it possible to also verify the client certs against a provided CRL? I see in the <code>x509</code> package there are some functions around CRLs, but I'm not sure how to configure the HTTP server to use them (ie. there doesn't seem to be any options in <code>tls.Config</code> that would cause a CRL to also be used).</p>