Re: [Openvpn-users] RE: Request: --crl-verify in DER format

[Jon Bendtsen <jon.bendtsen@xxxxxxxxxx>]

Den onsdag 1.feb kl. 16:15 skrev Alon Bar-Lev:

> yquenechdu@xxxxxxxxxxxx wrote:
> > Hi,
> > I would add following Jon, that to validate a CRL, the file must be
> > transformed into DER to analyze the ASN.1 contained in this one.
> >  Format PEM thus becomes useless. All CA of the market provide  
> > only DER.
> > this is the format by default for LCR,  it has yet only OpenSSL  
> > there to
> > use PEM in the LCR.
> > Cheers
> > Yannick Quenec'hdu
> > Linagora
>
> I use the following:
>
> if wget -q -k -O - http://xxxx/CAInfo/xxx.crl | openssl crl -inform  
> DER > ${CRL}.new; then
>         mv ${CRL}.new ${CRL}
> fi

Does this translate it into PEM format?



JonB

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users