Hello and thanks for your help,
> > > 1. How can I revoke an intermediate CA? Is It Possible?
>
> Yes it is possible. Just have the parent CA issue a CRL that includes
> the intermediate.
Do you mean that the parent CA's CRL must include the intermediate CA's
CRL?
I'm not sure I really understand your answer. Perhaps the question was not
clear.
What I wanted to know is: How does a root CA say it does not trust anymore
a sub-CA it has signed before?
Is it what you suggested?
Regards
Maxime.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]