Updating the CRL doesn't affect existing connections #5
Description
(originally recorded as RADSECPROXY-49)
Even when CRLCheck is enabled and CacheExpiry is reasonable, existing connections don't get torn down when their certificate show up in the CRL.
Reported by Adam Smutnicki.