Skip to content

crl dp url's not being properly added to root and intermedia ca certs #17

@joemiller

Description

@joemiller

When creating a new root and intermediate CA with the --root-crl-url and --crl-url params, I expected the root-ca.crt would contain a CRL DP matching the root-crl-url and the intermediat ca.crt would contain the crl-url, but I only see the root-crl-url in the intermediate ca.crt and no crl dp in the root-ca.crt. My expectation was that the root-ca.crt would contain the --root-crl-url and the intermediate ca.crt would contain the --crl-url. Is this a bug?

certified-ca --db=test --root-password='test' \
   --root-crl-url=https://example.tld/rootca.crl  \
   --crl-url=https://example.tld/ca.crl \
   --ocsp-url=https://ocsp.example.tld \
   C="US" ST="CA" L="San Francisco" O="joe" CN=testCA

openssl x509 -text -noout -in test/certs/root-ca.crt | grep -i crl
                Non Repudiation, Certificate Sign, CRL Sign

openssl x509 -text -noout -in test/certs/ca.crt | grep -i crl
            X509v3 CRL Distribution Points:
                  URI:https://home.joeym.net/rootca.crl
                Non Repudiation, Certificate Sign, CRL Sign

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions