Thanks.  I'm comparing to a CRL I have and which works, and what I
find that looks weird is this part:

 >    75:d=2  hl=2 l=  13 prim: UTCTIME           :000323230800Z
 >    90:d=2  hl=2 l=  13 prim: UTCTIME           :000324230800Z
*>   105:d=2  hl=2 l=  19 cons: cont [ 0 ]        
 >   107:d=3  hl=2 l=  17 cons: SEQUENCE          
 >   109:d=4  hl=2 l=  15 cons: SEQUENCE          
*>   111:d=5  hl=2 l=   3 prim: OBJECT            :X509v3 Authority Key Identifier
*>   116:d=5  hl=2 l=   8 prim: OCTET STRING      
 >   126:d=1  hl=2 l=  13 cons: SEQUENCE          
 >   128:d=2  hl=2 l=   9 prim: OBJECT            :md5WithRSAEncryption
 >   139:d=2  hl=2 l=   0 prim: NULL              
 >   141:d=1  hl=3 l= 129 prim: BIT STRING        
 > [dpalaiti@molybdenum RsaKeon]$ emacs SSLUser1.txt&
 > [1] 1345


Especially the 'cont [ 0 ]' looks pretty mysterious...  Steve, do you
have any input on this?

What I would have expected to see is something like this:

   75:d=2  hl=2 l=  13 prim: UTCTIME           :000323230800Z
   90:d=2  hl=2 l=  13 prim: UTCTIME           :000324230800Z
  105:d=2  hl=2 l=  20 cons: SEQUENCE          
  107:d=3  hl=2 l=  18 cons: SEQUENCE          
  109:d=4  hl=2 l=   1 prim: INTEGER           :05 
  112:d=4  hl=2 l=  13 prim: UTCTIME           :000225140652Z
  126:d=1  hl=2 l=  13 cons: SEQUENCE          
  128:d=2  hl=2 l=   9 prim: OBJECT            :md5WithRSAEncryption
  139:d=2  hl=2 l=   0 prim: NULL              
  141:d=1  hl=3 l= 129 prim: BIT STRING        

>From the source, that's also what I can see that OpenSSL expects...

-- 
Richard Levitte   \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis             -- [EMAIL PROTECTED]
           Member of the OpenSSL development team

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to