/ 
Crypt-OpenSSL-CA-0.09
River stage one • 2 direct dependents • 3 total dependents
/ delta-crl.t

NAME

delta-crl.t - Make a delta CRL as per RFC3280 section 5.2.4

DESCRIPTION

This test walks the reader through using Crypt::OpenSSL::CA to issue a delta CRL. The resulting delta CRL will be compatible with the CRL created by crlv2.t in the same directory.

TEST DATA

CA private key and certificate

Provided by Crypt::OpenSSL::CA::Test. See make-x509-cert.t for details.

Issuer coordinates

Global CRL settings

See details in crlv2.t

Additionally, this CRL is marked as a delta CRL whose base CRL is the one issued by crlv2.t . The corresponding extension is critical, as per RFC3280 section 5.2.4.

Revoked Certificates List

We add a revoked certificate to the CRL, and remove the hold instruction from certificate 0x42.

All done

Now we just have to sign the CRL.

CHECKING THE RESULT

In order for this test to succeed, the various decorations we set up for the CRL must show up in openssl crl or dumpasn1.