Another thing I found I needed to do in order to get Jetty to actually use the CRL was to make this call:

```clj
  (.setValidatePeerCerts context true)
```