Hi Fouta,

Here is what you requested.

# Generate a CRL
openssl ca gencrl -crldays 15 -out ./CRL.pem

# Revoking a Certificate
openssl ca -revoke ./userCert.pem

# NEXT Update the CRL
openssl ca -gencrl -crldays 15 -out ./CRL.pem

Enjoy!



Fouta Hafida wrote:
> 
> Dear all,
>         I am a new user of openssl. I ve insttalled it. I succeeded in creating my
> own CA with its privete key using openssl shell commands. I generated a
> certificate using this CA. In other words, I signed it using the private
> key of my  CA.
>          Now I want a CRL for this CA. How can I generate/have one that
> contains the revoked certificates. How can I revoke them using OpenSSL?
> Please if anybody can help me I will be really thankful.
>                                                                  Hafida
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

-- 
# .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .... .-
# Averroes A. Aysha
# Think Linux, Think Slackware!
# e-fingerprint = 63:B0:7D:A1:23:BC:25:96:AE:B7:76:36:F3:07:1F:88
# .- ...- . .-. .-. --- . ... .- .-.-.- .- -.-- ... .... .-

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to