RE: Handling Indirect CRL Issuer

2011-05-03 Thread Adam Rosenstein
table indirect crl? Thanks! Adam From: owner-openssl-us...@openssl.org [owner-openssl-us...@openssl.org] On Behalf Of Jeff Saremi [jsar...@morega.com] Sent: Thursday, March 17, 2011 3:01 PM To: openssl-users@openssl.org Subject: Re: Handling Indirect CRL Issuer

Re: Handling Indirect CRL Issuer

2011-03-18 Thread Jeff Saremi
With great many thanks to Dr. Henson for not only responding to every post I have had so far but also for providing solid guidance on how to address the problem leading to the heading of this thread, I am adding some extra material and some verbatim quotes from Dr. Henson here so that they might be

Re: Handling Indirect CRL Issuer

2011-03-17 Thread Dr. Stephen Henson
On Thu, Mar 17, 2011, Jeff Saremi wrote: > It looks like we need to support indirect CRL Issuers at least for CRL's > issued for ourselves. > If you don't mind my asking, why do you think you need to do that? I'm curious because so far you're the only person who has needed that functionality an

Re: Handling Indirect CRL Issuer

2011-03-17 Thread Jeff Saremi
It looks like we need to support indirect CRL Issuers at least for CRL's issued for ourselves. I have done most of the work. It looks I don't quite know how to generate CRLs with the indirect CRL issuer or I don't know how to generate the CRL issuer's certificate using the root certificate. So I

Re: Handling Indirect CRL Issuer

2011-03-17 Thread Dr. Stephen Henson
On Thu, Mar 17, 2011, Jeff Saremi wrote: > Does anyone have an example of how an indirect CRL issuer is handled? > This is my understanding of needs to be done. > If at least someone could verify that, I'd be really appreciative: > > 1. download the CRL > 2. If not indirect, handle as usual (let'

Handling Indirect CRL Issuer

2011-03-17 Thread Jeff Saremi
Does anyone have an example of how an indirect CRL issuer is handled? This is my understanding of needs to be done. If at least someone could verify that, I'd be really appreciative: 1. download the CRL 2. If not indirect, handle as usual (let's pretend for now that we know how to handle these in