questions about CRL Distribution Points extension in a certificate

2008-09-11 Thread JeanYiYi
Dear all: I am new in openssl. I have some questions regarding to 'CRL Distribution Points extension'. I did read the RFC. but it makes me more confused. :-(. a) a certificate has one and only one 'CRL Distribution Points extension'. What's configured in this extension is one CRL or multiple CR

how to query out crl by using DirName in crl distribution field

2008-09-04 Thread JeanYiYi
Dear all: I have a CA certificate. Its distributionPoint field contains a directoryName(DirName). It's a DN in LDAP. So, if I get ldap server ip and reserve whatever configured in DirName, can I do ldapsearch? If not, how can I query out crl by using this DirName. And again, it points to an entry