> > error 36 at 0 depth lookup:unhandled critical CRL extension
> > 
> Depends on what the critical extension is. Most probably it
> means that kind of CRL is not supported.
> 
> Post what you get with:
> openssl crl -in crl.pem -text -noout


Hi Steve,

Below is what I got when doing that query:

Certificate Revocation List (CRL):
  Version 2 (0x1)
  Signature Algorithm: sha1WithRSAEncryption
  Issuer: /C=AU/O=SecureNet Limited/CN=SecureNet Health OCA
  Last Update: Apr 12 07:32:27 2005 GMT
  Next Update: Apr 12 08:27:27 2005 GMT
  CRL extensions:
     X509v3 CRL Number:
       57775
     X509v3 Authority Key Identifier:
       keyid:4F:AA:A5:B6:A9:E2:EF:B6

     2.5.29.28: critical
       0.
Revoked Certificates:
  Serial Number: 3E517BA9
    Revocation Date: Feb 18 00:34:32 2003 GMT
    CRL entry extensions:
        X509v3 CRL Reason Code:
           Superseded
  Serial Number: 3E517D55
[...snip...]


Thanks for the quick response.
Eddy



                
__________________________________ 
Yahoo! Mail Mobile 
Take Yahoo! Mail with you! Check email on your mobile phone. 
http://mobile.yahoo.com/learn/mail 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to