Peter Gutmann wrote:
> There's another revocation status which needs a way of indicating it which is
> somewhat trickier, I'll bring it up here in case anyone has any ideas:
> Sometimes a cert can be issued in error, what's needed here is a revocation
> reason which says that not only is the cert revoked, it should never be and
> was never valid at any time for any reason. You can sort of achieve this by
In this case, when will br the entry removed from the CRL ? When the certificate
will be expired ?? Or should it be left in all future CRLs ?
--
C'you,
Massimiliano Pala
--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] madwolf@xxxxxxxxxx
madwolf@xxxxxxxxxxxxxxx
http://www.openca.org Tel.: +39 (0)59 270 094
http://openca.sourceforge.net Mobile: +39 (0)347 7222 365Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature