Dear mrz, thank you very much for your time and patience!
Tell me please, if it’s possible to block incomming VPN connection from Windows client when the client certificate is revocated without enabling verify-client-certificate ??
I am trying to use CRL ( http://forum.mikrotik.com/t/self-signed-certificates-and-crl/98965/1 ), but without success. RouterOS can create CRL available for public?