[openssl-users] Anyone using cert verification with indirect crls?

2016-04-20 Thread weber
Dear OpenSSL users, currently using openssl version 1.0.1d on Win32 and Linux and we're about to use indirect crls. The main intent is to keep the RCAs secrets in a vault. Since we found no commandline support for this, we wrote a class to generate the needed crls. Verifying a end-e

can i use indirect crls with SSL_CTX ?

2009-12-15 Thread Adam Rosenstein
If so, am I supposed to use X509_STORE_add* for the indirect crl signer cert and the iCRL? -Adam Rosenstein

Re: indirect CRLs

2006-04-11 Thread Holger Menzer
Dr. Stephen Henson wrote: On Wed, Apr 05, 2006, Holger Menzer wrote: Hello, is it possible to implement indirect Certificate Revocation Lists with OpenSSL? There is an entry in the man page to x509v3_config [1], saying it cannot currently be set or displayed... But maybe someone hacked it an

Re: indirect CRLs

2006-04-05 Thread Dr. Stephen Henson
On Wed, Apr 05, 2006, Holger Menzer wrote: > Hello, > > is it possible to implement indirect Certificate Revocation Lists with > OpenSSL? > There is an entry in the man page to x509v3_config [1], saying it cannot > currently be set or displayed... But maybe someone hacked it anyway > (- by usin

indirect CRLs

2006-04-05 Thread Holger Menzer
Hello, is it possible to implement indirect Certificate Revocation Lists with OpenSSL? There is an entry in the man page to x509v3_config [1], saying it cannot currently be set or displayed... But maybe someone hacked it anyway (- by using ASN.1 or DER for example). If it's possible, how can