> Is it possible to revoke a cert by serial number?

Using the ca command?  The answer is no.

> I searched the form and this question is not answered.

Use the source, Luke :)

I can't see a good reason why the crl txt_db needs the subject name.  It should 
be reasonable to modify ca.c to take the serial# instead of the cert (and 
perhaps a dummy subjectDN)

        /r$

--  
Principal Security Engineer
Akamai Technology
Cambridge, MA
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to