On Tue, Feb 19, 2008, Anri Lau wrote: > Hello All > > I still got a error "could not find the crl", error number is 3 , Is my CRL > not enough? The error depth is 1. > > do you mean in the CRL folder the CRL files' name should be <hash>.<n>. The > <hash> is the hash of file (what hash algorithm for this) and the <n> is the > index of the Certificate? >
If you have this working for certificates then it is very similar for CRLs. If you have c_rehash installed just do: c_rehash /path/to/dir If you create the linke manually then in the same way that for certificates you create a link called: hash.n Where "hash" is the output of: openssl x509 -in cert.pem -noout -hash and n is a number starting from zero and incrementing if two certificates have the same hash value. Fro CRLs the link is called: hash.rn Where "hash" is the output of: openssl crl -in crl.pem -noout -hash Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
