ssl - CRL Signature Validation against Issuer -


i have truststore containing certificates of known trusted cas. now, i'm writing service download certificate revocation lists (crls) ensure certificates in incoming ssl connections not revoked. before must verify crl valid , coming valid source.

following code helps me validate crl against issuer provided know it's issuer.

fileinputstream = new fileinputstream("mytruststore"); keystore keystore = keystore.getinstance(keystore.getdefaulttype()); keystore.load(is, "somepassword".tochararray()); x509certificate cert = (x509certificate) keystore.getcertificate("signer"); publickey key = cert.getpublickey(); crl.verify(key); 

now, given have truststore full of root ca certificates , crl, how verify crl when don't know issuer signed crl?


Comments

Popular posts from this blog

ubuntu - PHP script to find files of certain extensions in a directory, returns populated array when run in browser, but empty array when run from terminal -

php - How can i create a user dashboard -

javascript - How to detect toggling of the fullscreen-toolbar in jQuery Mobile? -