CRL distribution point inside cert

antho.c

Hello,

I was wondering if OpenVPN is able to read CRL distribution point info inside cert, instead of using crl-verify ?

I'm using EJBCA to generate my certs. I revoked the client certificate. Extracting the CRL file and using it with crl-verify is working (connection unsuccessful), but without it the connection is successful.

Thank You

efem

Hi.

I'm having the same situation as antho.c: I'm running an external certificate management tool (gnoMint) on an external machine, and I'm not sure how I'm supposed to get the generated CRL from there to my VPN server. Transferring the generated CRL file via USB drive works in my test setup, but of course won't be practical in productive use.
There has got to be some automated way, right?

I'm asking myself what the information about CRL distribution points inside the cert is good for, if not for programs like OpenVPN to read it out and be able to automatically fetch the CRL from the specified address.? :?:

I'm thankful for any help!