Hi Pedro,

my English is not the best one but your's is a problem for me too ;-)

Pedro Jossi wrote:

I did not have problems during the creacion of the files openssl, but I considered that was an error that all the crl have the number of series 1 .... By another side I considered that the crl should contain all the certificates revoked, since the first one to the last one crl. ... Is an error ?

To make it clear. A CRL (not a delta CRL) must contain all revoked certificates. If certificate 4 was revoked then the certificate serial 4 must be present in every CRL after the revocation.


The newly generated CRL includes all certificates which are marked as revoked in index.txt. Therefore you must recover the OpenSSL files.

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to