Hi, How do I check in my code, if a certificate is revoked or not? >From what I googled : The x509 certificate contains set of CRL distribution points, ie set of urls. We need to download the crl list . Crl list contains serial numbers of certificates revoked and the date in which they were revoked. If the peer certificate's serial number is present in the crl list, then it should be deemed as revoked.
What are the openssl apis to do this. Also is this the right way of checking if a certificate has been revoked? Thanks in advance, Arun