Skip to main content

Questions tagged [crl]

Certificate Revocation List (CRL) is one of two common methods when using a public key infrastructure for maintaining access to servers in a network.

Filter by
Sorted by
Tagged with
1 vote
0 answers
37 views

What's the difference between this mentioned list and a certification revocation list?

I've come across this paper in which the authors mentioned that they don't use a revocation certification list (CRL) since it gives rise to significant costs due to storage and inefficient ...
Chai Ma's user avatar
  • 125
1 vote
0 answers
559 views

certificate revocation list file size

Crl files are growing linearly. I wonder with 10 revoked certificate, what is the storage size of crl file and so on. For every revoke certificate, how much increase the size of the crl?
jhdm's user avatar
  • 187
1 vote
1 answer
1k views

What does (06) in "CRL Signing (06)" mean?

In "Certificate details -> key usage -> CRL Signing (06)", what does "(06)" in "CRL Signing (06)" mean?
IMène_'s user avatar
  • 11
1 vote
1 answer
70 views

How are certificate status obtained on browsers?

There are two ways of checking the status of a digital certificate:- Offline Authentication (CRL) Online Authentication (OCSP, SCVP) Several browsers (like Mozilla Firefox) have given up the use of ...
Vasu Deo.S's user avatar
1 vote
2 answers
324 views

How are CRL implemented?

The source from where I learn states:- CRL (Certificate Revocation List) is the primary means of checking status of certificates offline. But I can't seem to understand how is it possible for a ...
Vasu Deo.S's user avatar
1 vote
1 answer
233 views

Secure Design and CRL?

I was at my College Security Lesson, the professor said that Certificate Revocation Lists (CRLs) violate some of the Secure Design principles. Secure Design Principles: Fail-Safe Defaults Economy of ...
LUIGI SAVINO's user avatar
1 vote
1 answer
507 views

how to avoid attack on Certificate Revocation List by the owner of the private key?

B requests for A's certificate and verifies with the key sent to him/her. There is an attack exists as follows: A sends message, cert and cert key to B. A sends cert revocation request to CA after ...
lihui's user avatar
  • 13
1 vote
1 answer
1k views

How to sign a CRL file if I have offline keys?

I am generating a CA for internal use. When generating a CA, the best practice I have observed is to keep the root CA offline and emit an intermediate CA certificate that will in turn emit the end-...
gimix's user avatar
  • 111
2 votes
1 answer
276 views

Any case that can require to encrypt a certificate revocation list before distribution

As far as we know certificate revocation lists (CRLs) include public information so they do not have to be encrypted before distribution. Is there a case that can require to encrypt it before ...
Samet Tonyalı's user avatar
2 votes
1 answer
326 views

CRL number generation sequence: can I use a time stamp?

RFC 5280 states that the CRL number should monotonically increase. I have seen this common practice of incrementing the CRL number by 1, every time a new CRL is generated. But can I use a Unix (epoch ...
Buzz LIghtyear's user avatar
1 vote
1 answer
904 views

I've got my private key compromised. How does CRL work?

How does certificate revocation list (CRL) work? How can I send a request to the CA to add my current private key to the CRL, so no one except me can add my certificate to the CRL? Related: - How can ...
evening's user avatar
  • 1,383