X509 CRLs

2013-08-27 Thread Thaddeus Fuller
Hello all, I had a couple questions about X509 CRLs. 1) It appears that OpenSSL does not check my tree against the CRLs I provide. If I revoke my own leaf certificate, and establish mutually-authenticated SSL, OpenSSL does not prevent the connection from going through. However if I revoke the

PKCS8 Encryption Algorithm

2013-06-12 Thread Thaddeus Fuller
Hi, Is it possible to create a PKCS8 RSA Private Key using a non-password based encryption algorithm? There doesn't appear to be an option through the command line `openssl pkcs8`. If it is not possible to do this through OpenSSL (which seems to be the case), is it not a valid way to encrypt th