I'll go back to the spec but I believe it is 1)
Aleksey On 5/7/12 3:35 PM, EdShallow wrote: > Good . . . do you mean that the xmlSecDSigCtxVerify call will also check > to see if the serial number in the signer certificate is in the CRL > revoked list? > > Is the <X509CRL> element a child of the same <X509Data> element that the > <X509Certificate> is a child of? > > Which one is correct? > > 1) this one . . . > > <X509Data> > <X509Certificate></X509Certificate> > <X509CRL></X509CRL> > </X509Data> > > 2) or this one . . . > > <X509Data> > <X509Certificate></X509Certificate> > </X509Data> > <X509Data> > <X509CRL></X509CRL> > </X509Data> > > Thanks again . . . > Ed > > > > On Mon, May 7, 2012 at 6:16 PM, Aleksey Sanin <[email protected] > <mailto:[email protected]>> wrote: > > yes, it should check for CRL in the XML document > > Aleksey > > On 5/7/12 3:15 PM, EdShallow wrote: > > If I include the relevant CRL within a signature and then pass it > in for > > verification, will XMLsec check the signer certificate against that > > included CRL automatically as part of the Verify call? > > > > If so, how should the CRL be included in the signature structure? > > > > Thanks, > > Ed > > > > -- > > Ed's Contact Information: > > Mobile Phone: 613-852-6410 <tel:613-852-6410> > > Gmail: [email protected] <mailto:[email protected]> > <mailto:[email protected] <mailto:[email protected]>> > > VOIP Address: [email protected] > <mailto:[email protected]> <mailto:[email protected] > <mailto:[email protected]>> > > VOIP DID#: 613-458-5004 <tel:613-458-5004> > > Skype ID: edward.shallow > > Home Phone: 613-482-2090 <tel:613-482-2090> > > > > > > > > _______________________________________________ > > xmlsec mailing list > > [email protected] <mailto:[email protected]> > > http://www.aleksey.com/mailman/listinfo/xmlsec > > > > > -- > Ed's Contact Information: > Mobile Phone: 613-852-6410 > Gmail: [email protected] <mailto:[email protected]> > VOIP Address: [email protected] <mailto:[email protected]> > VOIP DID#: 613-458-5004 > Skype ID: edward.shallow > Home Phone: 613-482-2090 > _______________________________________________ xmlsec mailing list [email protected] http://www.aleksey.com/mailman/listinfo/xmlsec
