I looks like Firefox is not checking intermediate CA certificates using OCSP
or CRL's. Found some sites saying that intermediate CA revocation
information is published using OneCRL (not sure if this information is
accurate).

That means that if I have an internal CA and would need to revoke an
intermediate CA certificate signed by my root CA, Firefox would never
notice. Any way to solve this?

 

Regards,

Martin

_______________________________________________
Enterprise mailing list
[email protected]
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
[email protected] with a subject of "unsubscribe"

Reply via email to