Axel Findling wrote:
>
> Hello,
>
> Netscape use the Content-Type application/x-pkcs7-crl for import a CRL in
> the Browser (Netscape 4).
>
> Hwo can I generate a Content-Type-application/x-pkcs7-crl-conform CRL with
> OpenSSL 0.9.1c?
>
> I've tried it with
> opennssl crl2pkcs7 -outform DER -in crlfile -out crlfilepkcs7
> and with
> opennssl crl2pkcs7 -outform DER -certfile publiccakey -in crlfile -out crlfilepkcs7
> but Netscape says, this format is not valid.
>
> Can anyone help me on this?
>
>
> ... and a second question:
>
> Does anyone know the sense of Content-Type: application/x-netscape-crl
> for Binary download of a CRL?
> Why shouldn't I use application/octet-stream ?
If i remember it right you had to use something like
openssl ca -gencrl -out crl.pem
to generate a CRL. After that you have to convert it to DER-format with
openssl crl -in crl.pem -outform DER -out crl.der
Don't get irratated by the pkcs7 thing in the MIME-Type...
Ciao,
Lars <[EMAIL PROTECTED]>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
