Re: CRL with OpenSSL

[Erwann Abalea <eabalea@gmail.com>]

Now you've got another problem. Why do you have 2 different CAs with the same private key?

It's getting more off-topic, sorry.

2014-04-14 20:23 GMT+02:00 Emmanuel Dreyfus <manu@netbsd.org>:

Erwann Abalea <eabalea@gmail.com> wrote:

> It considers that the CRL found at "hash".r0 isn't valid or sufficient to
> give a revocation status of your certificate.
> Could you post the subscriber certificate, its issuing CA cert, and the
> corresponding CRL somewhere?

I found the problem: it was not signed by the right CA (same private
key, different cert)

--
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org

--
Erwann.