Updating CRL in Tomcat 6 without taking it down

[Praveen Pat]

Hello:

I am running Tomcat 6 in SSL mode with ClientAuth=true.
Here are my Connector Properties:

<Connector protocol="org.apache.coyote.http11.Http11Protocol"
   port="8443"
   SSLEnabled="true"
                           maxThreads="150"
   scheme="https"
   secure="true"
                           clientAuth="true"
   sslProtocol="TLS"
   keystoreFile="one.mamoi.semdev.com.pkcs12"
   keystoreType="PKCS12"
   keystorePass="changeit"
   truststoreFile="server.truststore"
   truststorePass="changeit"
   truststoreType="JKS"
   crlFile="SEMDEV TEST CA.crl"
         />

The problem I have is how to update the CRL.
If I do not update the CRL, Tomcat does not let any of my users in. It
blocks all the users.
To update the CRL, I have to stop the Tomcat, and I am trying to avoid it.

Thanks in Advance.

Regards,
Praveen