Dave wrote:
>
> Hello,
>
> I am trying to test OpenSSL for RSA Keon interopability.
> All tests pass except for the following,...
>
> bash% openssl crl -inform DER -in keon2.crl -text
> unable to load CRL
> 6062 error:0DA4008:asn1 encoding routines, etc. etc. etc.
>
> Does anyone have any experience using Keon CRL's with OpenSSL ?
>
I suggest you try OpenSSL 0.9.5 if (as I suspect) you are trying 0.9.4.
There is an issue with some CRLs that include extensions but have the
CRL version set to 1. This is allowed in the X509 standards but not
PKIX.
OpenSSL before 0.9.5 couldn't handle this: current versions should be
OK.
This would cause the error you mentioned but it could conceivably be
something else.
If this doesn't help then please include the CRL itself and I'll see if
I can trace the cause.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
