Re: Do I need to do anything special to get certificate validation to use a CDP?

2007-12-24 Thread Cong Zhang
I remember that most CDPs are HTTP URL, LDAP URL, a UNC string, etc. I did not checked the standard for all supported formats, but HTTP URL is the most common. So you may use any tools supports HTTP to retrieve them, such as wget or curl. For example, in my browser there is an CA certificate issue

Re: Do I need to do anything special to get certificate validation to use a CDP?

2007-12-24 Thread Bruce Keats
Thank you. Is there a function within the API that can do the CRL extraction from the CDP(s)? Bruce On Dec 22, 2007 4:32 AM, Cong Zhang <[EMAIL PROTECTED]> wrote: > Hi, > > AFAIK, OpenSSL has no code to retrieve the CRL from CRL distribution > points. The CRL retrieve and update should be done