Bonny, bonny joy wrote:
> > hi all > > I am working on mozilla's nss code. I have some trouble on using > crlutil.eventhough i am using a crlv2 it is giving an error message > invalid format .Is this the error with the crlutil or the decoding code > in the implementation. > > A few things to check : - there were problems with the CRL code in the tip of NSS (3.4 beta) before last week, but they have been resolved. If you are using the latest code, please update your tree and rebuild it . That might solve your problem. If you are using a release of NSS 3.3, then that's not the issue as the problem did not exist. - make sure that the CRL you are importing is stored in binary DER format. If that's not the case, then it won't be recognized by crlutil. - you must have the CA cert that the CRL applies to in your cert database, otherwise the CRL will be rejected. You can add that cert to your cert7.db using certutil. If all that still fails, you'll have to debug the code. The function to check is CERT_ImportCRL. You should be able to easily tell from a high-level which step failed.
