Tim Tassonis wrote:
>
> Hi
>
> I've got a question regarding crl formats.
>
> Until now, I found two mime types for use with crl's:
>
> "application/pkix-crl", which seems to be either a DER or PEM formatted
> crl as in openssl crl.
>
> "application/x-pkcs7-crl", which, I would guess at least by its name,
> should be a pkcs7 file containing a crl and the isser certificates. I can
> easily create one using openssl crl2pkcs7.
>
> At least Netscape 4.nn however requires mime type
> "application/x-pkcs7-crl" together with a DER formatted crl, as in openssl
> crl. It will refuse a pkcs7 crl, at least in DER Format.
>
> Is Netscape just horribly wrong or what is the defined crl format for
> "application/x-pkcs7-crl"?
>
The Nestcape format is AFAIK not officially documented anywhere. I only
saw that MIME type in a dark corner of one of the online manuals to some
version of NS certificate server and did some experiments with it. I
could only get a DER encoded CRL to work.
Now the mozilla source is available it is possible to peek at the code
(assuming this is handled in PSM) and see what its trying to do.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
