RE: Expired certificates out from revocation list

2007-12-17 Thread David Schwartz
> How can I get rid of the expired certificates in the revocation > list? When I > do openssl ca -gencrl -out revocationlist.crl -config myconfig.cfg the > revoked certificates that are also expired are added into the > list. It is no > use to store them there because the revocation list grows big

Re: Expired certificates out from revocation list

2007-12-17 Thread Bernhard Froehlich
unski schrieb: How can I get rid of the expired certificates in the revocation list? When I do openssl ca -gencrl -out revocationlist.crl -config myconfig.cfg the revoked certificates that are also expired are added into the list. It is no use to store them there because the revocation list grows