delta-crl.t - Make a delta CRL as per RFC3280 section 5.2.4
This test walks the reader through using Crypt::OpenSSL::CA to issue a delta CRL. The resulting delta CRL will be compatible with the CRL created by crlv2.t in the same directory.
Provided by Crypt::OpenSSL::CA::Test. See make-x509-cert.t for details.
See details in crlv2.t
crlv2.t
Additionally, this CRL is marked as a delta CRL whose base CRL is the one issued by crlv2.t . The corresponding extension is critical, as per RFC3280 section 5.2.4.
We add a revoked certificate to the CRL, and remove the hold instruction from certificate 0x42.
Now we just have to sign the CRL.
In order for this test to succeed, the various decorations we set up for the CRL must show up in openssl crl or dumpasn1.
openssl crl
dumpasn1
To install Crypt::OpenSSL::CA, copy and paste the appropriate command in to your terminal.
cpanm
cpanm Crypt::OpenSSL::CA
CPAN shell
perl -MCPAN -e shell install Crypt::OpenSSL::CA
For more information on module installation, please visit the detailed CPAN module installation guide.