Hi all,

    I have generated an empty CRL, added a cert ands signed the CRL using
following commands.
    X509_CRL_new
    sk_X509_REVOKED_push
    X509_CRL_sign

    Yet trying to output a text form with openssl command line tool gives me
following error :
*********
OpenSSL> crl -in signed_crl.pem -text
unable to load CRL
1360:error:0D084069:asn1 encoding routines:d2i_ASN1_SET:bad tag:a_set.c:177:
1360:error:0D0A7004:asn1 encoding routines:d2i_X509_NAME:nested asn1
error:x_name.c:197:address=167878300 offset=2
1360:error:0D0A4004:asn1 encoding routines:d2i_X509_CRL_INFO:nested asn1
error:x_crl.c:167:address=167878283 offset=17
1360:error:0D0A3004:asn1 encoding routines:d2i_X509_CRL:nested asn1
error:x_crl.c:230:address=167878280 offset=3
1360:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:pem_lib.c:290:
error in crl
*********

    I include the files
        "signed_crl.pem", the signed CRL containing one cert
        "cert.pem", the cert whose serial i added to the crl
        "cacert.pem", the cert to use to verify the crl with (public key
corresponding to private key used to sign the crl)



    Any help is welcome, thanks in advance


--------
Florian

signed_crl.pem

cert.pem

cacert.pem

----------------------------------------- (on maileerie)

signed_crl.pem a ete scanne et contient aucun virus.
cert.pem a ete scanne et contient aucun virus.
cacert.pem a ete scanne et contient aucun virus.
---------------------------------------------------------

Reply via email to