Fedora User Certificates

[John W. Linville]

On Mon, Aug 25, 2008 at 01:21:26PM -0500, Dennis Gilmore wrote:
> On Monday 25 August 2008 01:00:25 pm John W. Linville wrote:
> > On Mon, Aug 25, 2008 at 09:59:31AM -0600, Jerry James wrote:
> > > Has anyone had any luck importing the revocation list into Firefox?

> > It looks to me like the CRL is in a PEM format instead of a DER format.
> > Perhaps the crl tool will convert it properly (haven't tried)?
> >
> > 	http://www.openssl.org/docs/apps/crl.html
> 
> http://www.freesoft.org/CIE/RFC/1422/34.htm
> 
> apache expects the crl to be pem format http://www.apache-
> ssl.org/docs.html#SSLUseCRL  we are using the crl with apache on the lookaside 
> cache and koji.  

Sure, fine.  But Jerry was trying to load the CRL into his browser,
and AFAIK Firefox wants the DER format.

John
-- 
John W. Linville
linville at redhat.com