ssl wrote:
>
> On Mon, 30 Aug 1999, Michael Ströder wrote:
>
> > ssl wrote:
> > >
> > > below the cert info, you'll see the "Check Certificate Status" button,
> > > [..]
> > > By this method, the cert must have "nsRevocationUrl" pointing
> > > to a cgi to check it.
> >
> > This on-line certificate validation has nothing to do with CRLs at
> > all.
> >
> Ah yes, getting confused.
> rather, the cgi should check the crl whether that serial is revoked.
No, the CGI-BIN should directly check against a certificate database or
similar more up-to-date repository.
Ciao, Michael.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
