On Mon, Aug 25, 2008 at 01:21:26PM -0500, Dennis Gilmore wrote: > On Monday 25 August 2008 01:00:25 pm John W. Linville wrote: > > On Mon, Aug 25, 2008 at 09:59:31AM -0600, Jerry James wrote: > > > Has anyone had any luck importing the revocation list into Firefox? > > It looks to me like the CRL is in a PEM format instead of a DER format. > > Perhaps the crl tool will convert it properly (haven't tried)? > > > > http://www.openssl.org/docs/apps/crl.html > > http://www.freesoft.org/CIE/RFC/1422/34.htm > > apache expects the crl to be pem format http://www.apache- > ssl.org/docs.html#SSLUseCRL we are using the crl with apache on the lookaside > cache and koji. Sure, fine. But Jerry was trying to load the CRL into his browser, and AFAIK Firefox wants the DER format. John -- John W. Linville linville@xxxxxxxxxx -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list