langui.sh » crl http://langui.sh Fun hacks, WP plugins, photography, and PKI junk. Languishing since 2008. Tue, 20 Jul 2010 22:12:45 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Parsing A CRL With OpenSSL http://langui.sh/2010/01/10/parsing-a-crl-with-openssl/ http://langui.sh/2010/01/10/parsing-a-crl-with-openssl/#comments Mon, 11 Jan 2010 02:29:47 +0000 Paul Kehrer http://langui.sh/?p=952 Short and sweet. This command will give you a list of revoked serial numbers:

openssl crl -inform DER -text -noout -in mycrl.crl

Most CRLs are DER encoded, but you can use -inform PEM if your CRL is not binary. If you’re unsure if it is DER or PEM open it with a text editor. If you see —–BEGIN X509 CRL—– then it’s PEM and if you see strange binary-looking garbage characters it’s DER.

]]> http://langui.sh/2010/01/10/parsing-a-crl-with-openssl/feed/ 0