Hello, I have a large CRL. It is 4503899 bytes long in DER format.
If I try to dump it with: openssl crl -inform DER -text -noout -in /tmp/user.crl I got an error: unable to load CRL 139981611914920:error:0D09E09B:asn1 encoding routines:X509_NAME_EX_D2I:too long:x_name.c:203: 139981611914920:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:tasn_dec.c:697:Field=issuer, Type=X509_CRL_INFO 139981611914920:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:tasn_dec.c:697:Field=crl, Type=X509_CRL I tried this with: - OpenSSL 1.0.2h-fips - OpenSSL 1.0.1t - OpenSSL 1.0.1e-fips Only OpenSSL 1.0.1e-fips ran without error and dumped the CRL. Since one version ran smoothly I suppose the command is correct. Is it really a bug in 1.0.2h or 1.0.2h needs different parameters? Cheers Csaba -- Ticket here: http://rt.openssl.org/Ticket/Display.html?id=4650 Please log in as guest with password guest if prompted
<<attachment: winmail.dat>>
-- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
