Re: [Openvpn-users] RE: Request: --crl-verify in DER format

[Alon Bar-Lev <alon.barlev@xxxxxxxxx>]

yquenechdu@xxxxxxxxxxxx wrote:
> Hi,
>
> I would add following Jon, that to validate a CRL, the file must be
> transformed into DER to analyze the ASN.1 contained in this one.
>  Format PEM thus becomes useless. All CA of the market provide only DER.
> this is the format by default for LCR,  it has yet only OpenSSL there to
> use PEM in the LCR.
>
> Cheers
> Yannick Quenec'hdu
> Linagora

I use the following:

if wget -q -k -O - http://xxxx/CAInfo/xxx.crl | openssl crl 
-inform DER > ${CRL}.new; then
        mv ${CRL}.new ${CRL}
fi

Best Regards,
Alon Bar-Lev.

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users