ssl - CRL Signature Validation against Issuer -
i have truststore containing certificates of known trusted cas. now, i'm writing service download certificate revocation lists (crls) ensure certificates in incoming ssl connections not revoked. before must verify crl valid , coming valid source.
following code helps me validate crl against issuer provided know it's issuer.
fileinputstream = new fileinputstream("mytruststore"); keystore keystore = keystore.getinstance(keystore.getdefaulttype()); keystore.load(is, "somepassword".tochararray()); x509certificate cert = (x509certificate) keystore.getcertificate("signer"); publickey key = cert.getpublickey(); crl.verify(key);
now, given have truststore full of root ca certificates , crl, how verify crl when don't know issuer signed crl?
Comments
Post a Comment