Hi Andrea,

First of all: the provided certificate has basic constraints set to critical
with ca:false, so this certificate
is not allowed to sign crls and so the verification fails.

To verify the CRL:
1. convert the certificate to PEM
 > openssl x509 -in certificate.der -inform DER in out certificate.pem
2. check it
 > openssl crl -in myacrl.der -inform DER -CAfile certificate.pem

The verification fails because of BC=critical,ca:false

Kind regards,

Chris

--
Christian Pohl
secaron AG
"Andrea Nagar" <[EMAIL PROTECTED]> schrieb im Newsbeitrag
news:[EMAIL PROTECTED].
..
> I have a CRL file (mycrl.der) that has been signed
> with a certificate whose public key is contained into
> the (certificate.der) file. I would really be grateful
> if someone could help me out with this: how can I
> verify the signature of the mycrl.der file with the
> certificate.der.
>
> I would really appreciate if someone could send me
> some code to do this.
>
> I'm really in a hurry since I'm doing my thesis and
> the closing date is approacing very fast.
>
> Thanks a lot.
> Andrea Nagar
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! - Official partner of 2002 FIFA World Cup
> http://fifaworldcup.yahoo.com


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to