ssl - CRL Signature Validation against Issuer -


i have truststore containing certificates of known trusted cas. now, i'm writing service download certificate revocation lists (crls) ensure certificates in incoming ssl connections not revoked. before must verify crl valid , coming valid source.

following code helps me validate crl against issuer provided know it's issuer.

fileinputstream = new fileinputstream("mytruststore"); keystore keystore = keystore.getinstance(keystore.getdefaulttype()); keystore.load(is, "somepassword".tochararray()); x509certificate cert = (x509certificate) keystore.getcertificate("signer"); publickey key = cert.getpublickey(); crl.verify(key); 

now, given have truststore full of root ca certificates , crl, how verify crl when don't know issuer signed crl?


Comments

Popular posts from this blog

python - Operations inside variables -

Generic Map Parameter java -

arrays - What causes a java.lang.ArrayIndexOutOfBoundsException and how do I prevent it? -