[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Re: Temporarily disabling client certificates


  • Subject: Re: [Openvpn-users] Re: Temporarily disabling client certificates
  • From: Charles Duffy <cduffy@xxxxxxxxxxx>
  • Date: Fri, 14 Jan 2005 23:02:10 -0600

On Fri, 2005-01-14 at 23:54 -0500, Ed Ravin wrote:
> I admit that I haven't worked with CRLs before, but isn't the CRL
> in the same format say, as a root cert file for a web server,
> containing multiple certificates and optional comments between them?

Nope. It's opaque, like this:

-----BEGIN X509 CRL-----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-----END X509 CRL-----

The above block contains two revocations and a signature.



-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users