just add
crl-verify <full path to crl file>
to the client config; also, make sure the CRL file stays up to date; the only reason to use a CRL file on the client is to protect the client when the one of the *servers* has been breached. Is that really going to be an issue?
