Hi ,

I am writing a client which connects to a secure server.
I need to verify the certificate obatined  from the server for CRL
Revocation.

Could some one please tell which NSS api's are available.
These are the steps i am following currently
I extracted the CRL url from distribution points and then downloaded
the CRL.
After reading the downloaded CRL file , i tried
CERT_CacheCRL() but it gives SEC_ERROR_BAD_DER everytime.

Also PK11_ImportCRL() only imports the CRL which are binary and not
the one those begin with ".....Begin CERTIFICATE"

Could some one please tell me if i am going wrong some where and what
are the steps to be followed

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to