[strongSwan] CRL response with Strongswan 4

Andreas Steffen andreas.steffen at strongswan.org
Mon Nov 26 15:00:51 CET 2012

Hi Fabrice,

does the Authority Key Identifier contained in the CRL
equal the Subject Key Identifier of the CA certificate?

This means: Is the signer of the CRL the same authority
which signed the end-entity certificates?

On 26.11.2012 13:29, Fabrice Barconnière wrote:
>          CRL extensions:
>              X509v3 Authority Key Identifier:
> keyid:7A:BC:B4:68:F8:B1:A2:32:44:C9:D0:EB:FD:9E:06:C2:56:01:2B:03



Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4468 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20121126/9f69df51/attachment.bin>

More information about the Users mailing list