Fedora User Certificates

[Dennis Gilmore]

On Monday 25 August 2008 01:00:25 pm John W. Linville wrote:
> On Mon, Aug 25, 2008 at 09:59:31AM -0600, Jerry James wrote:
> > Has anyone had any luck importing the revocation list into Firefox?
> > When I choose the import button on the revocation list tab, I do not
> > get a file browser like I do with the other options.  I just get a box
> > asking me where the revocation list information is stored, with a text
> > field.  I put the absolute pathname in, click OK ... and nothing
> > happens.  No error messages.  No success either.
>
> I am far from on expert on such things, but I did happen to just do
> this for my personal infrastructure.  (Plus, I stayed at a Holiday
> Inn Express last night!)
>
> It looks to me like the CRL is in a PEM format instead of a DER format.
> Perhaps the crl tool will convert it properly (haven't tried)?
>
> 	http://www.openssl.org/docs/apps/crl.html

http://www.freesoft.org/CIE/RFC/1422/34.htm

apache expects the crl to be pem format http://www.apache-
ssl.org/docs.html#SSLUseCRL  we are using the crl with apache on the lookaside 
cache and koji.  

Dennis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20080825/d61923e6/attachment.sig>