After one day pending-status I'll post this message again.
domi wrote: > > I won’t quote our complete conversation because it has grown to a rather > huge amount of text. I just will say: Yes, Goetz you are right ;) > So I come to the conclusion that I can’t to those things in OpenSSL which > I had in mind because of the considerations and disadvantages Goetz > mentioned. > Just some last explanations: Of course my scenario is just fictional and I > won’t try to set up a commercial CA or web-server using it. Only for > testing purposes isolated from the rest of the world. > And it just makes sense for a huge CA (like Verisign) with a very short > lifetime of CRLs and the MUST use of the CRLs (OCSP is not an option for > me). > > > By the way, another problem occurred during my testing: The Apache2 server > works using a certificate and the CRL has been imported to the browser > (Firefox in my case. Other browsers will follow). But I don’t have any > problems to connect to the site although the certificate is revoked. I was > not able to discover the reason but I’m still searching. Any guesses? > > greetings domi > > -- View this message in context: http://www.nabble.com/crlDistributionPoints-in-a-certificate-request-tf3148251.html#a8780236 Sent from the OpenSSL - User mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
