[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: certificate list parsing issues

To: masarati@aero.polimi.it
Subject: Re: certificate list parsing issues
From: Michael Ströder <michael@stroeder.com>
Date: Tue, 04 Aug 2009 10:04:44 +0200
Cc: openldap-devel@openldap.org
In-reply-to: <47916.93.149.38.250.1249292426.squirrel@www.aero.polimi.it>
References: <47916.93.149.38.250.1249292426.squirrel@www.aero.polimi.it>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.22) Gecko/20090606 SeaMonkey/1.1.17

masarati@aero.polimi.it wrote:
> I recently hit a pretty long certificate list with what appears to be crap
> past the end of its valid portion.  I have no indication about how this
> was generated, but it is supposed to be in production within a CA,
> initially using a release of OpenLDAP without detailed CL validation in
> place (remember this was released in 2.4).  I'm not posting this to the
> ITS because it's data I'm not allowed to disclose.

How about using this one as a test (33 MB):

http://onsitecrl.certplus.com/DIRECTIONGENERALEDESIMPOTSDIRECTIONGENERALEDESIMPOTSUSAGER/LatestCRL

IIRC I once tried to add this one in OpenLDAP 2.4.x but it did not work.

Ciao, Michael.

Follow-Ups:
- Re: certificate list parsing issues
  - From: Howard Chu <hyc@symas.com>
- Re: certificate list parsing issues
  - From: Pierangelo Masarati <masarati@aero.polimi.it>

References:
- certificate list parsing issues
  - From: masarati@aero.polimi.it

Prev by Date: Re: certificate list parsing issues
Next by Date: Re: certificate list parsing issues
Index(es):
- Chronological
- Thread