tags:

views:

57

answers:

0

With openssl library, how do i check if the peer certificate is revoked or not. from what i googled:

  1. x509 cerfiticate contains set of crl distribution points, ie set of urls
  2. download the crl from these urls
  3. crl contains serial numbers of certificates that are revoked
  4. if the peer certificate serial number is there in the crl list, then it is revoked

what openssl apis do i use to accomplish this? Also, is this the right way of checking if the certificate is revoked or not?