Re: ca command lets me revoke certificates from a different CA

2012-01-20 Thread Jakob Bohm
On 1/20/2012 12:11 PM, Mathias Tausig wrote: Hy! If I revoke a certificate using the "-revoke" option of the "ca" command and pass it a certificate which is issued by a different CA, this is not checked by openssl. Which has the consequence, that (if the serial number of the certificate to be re

ca command lets me revoke certificates from a different CA

2012-01-20 Thread Mathias Tausig
Hy! If I revoke a certificate using the "-revoke" option of the "ca" command and pass it a certificate which is issued by a different CA, this is not checked by openssl. Which has the consequence, that (if the serial number of the certificate to be revoked is not present yet) a new entry is added