Hi, I am working on CRL validation on LONGHORN CA. My issue is to extract the CDP for delta crl. I found a way to extract the delta crl name from normal crl file. Is it correct?
Let me explain you clearly: I found that the delta crl name format in LONGHORN CA is some thing like... Normal CRL: something.crl Delta CRL: something+.crl. At the some location of normal crl. Since I already got the CRL, I can derive the delta crl(something+.crl) file name from that and will do the further processing. Is it correct? Will it be fine? If not, Could any body let me know the procedure to obtain the cdp for delta crl? Please let me know. Thanks a lot, -Suren ============================ Hi, I am working on CRL validation. I am using openssl 0.9.8b. QUESTION: How to retrive the CDP for Delta CRL? Procedure: Delta CRLDP is a bit messy because it isn't yet supported by OpenSSL directly. However you can add the OID manually using OBJ_create() and alias the extension to CRLDP and retrieve it that way. Could you please elaborate the same? Thousand Thanks -Suren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dr. Stephen Henson Sent: Sunday, August 27, 2006 4:03 AM To: [email protected] Subject: Re: How to retrive the delta CRL location and revocation reason? On Fri, Aug 25, 2006, [EMAIL PROTECTED] wrote: > > Hi Team, > > I am working on the CRL validation. I am seeing some issues in > extracting the > - delta crl distribution point and > - reason for revocation. > > Could you please let me know your thoughts on how to access these two > above mentioned information? Delta CRLDP is a bit messy because it isn't yet supported by OpenSSL directly. However you can add the OID manually using OBJ_create() and alias the extension to CRLDP and retrieve it that way. The CRL reason code is easier. You can retrieve it from the relevant X509_REVOKED structure using X509_REVOKED_get_ext_d2i(). Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED] The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED] The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
