if (caCrlFile.exists()) {
log.log(Level.FINE, "read certificate revocation list from {0}", caCrlFile);
in = new FileInputStream(caCrlFile);
try {
Collection crls = certFac.generateCRLs(in);
CollectionCertStoreParameters certStoreParams = new CollectionCertStoreParameters(crls);
CertStore certStore = CertStore.getInstance("Collection", certStoreParams);
pkixParams.setRevocationEnabled(true);