Hi Hans,

On 19/06/14 16:14, [email protected] wrote:

Hi all,

In the server you can specify the file-location of a (previously-fetched-by-cron) revocation list.

But what if admins tell you, that you should be using delta-crl's (because they are much smaller)?

Should I "cat" all those files together?

Or should I examine the validity-period manually, and cat only "valid crl-files" ....


openssl does not currently support things like delta CRLs (it's part of the CRL v2 spec) ; I'm not sure about PolarSSL but their website does not suggest it.
hence my bet is that openvpn also does not grok them.

HTH,

JJK
------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to