Cycle de vie : Création / Révocation (5/5)

Révocation d'un certificat

$ openssl ca -config ./openssl.cnf -revoke client.pem
Enter PEM pass phrase:
Revoking Certificate 04.
Data Base Updated

$ openssl ca -config ./openssl.cnf -gencrl -crldays 30 
Enter PEM pass phrase:
-----BEGIN X509 CRL-----
MIIBaDCB0jANBgkqhkiG9w0BAQQFADB5MQswCQYDVQQGEwJGUjEWMBQGA1UECBMN
[...]
3w2288WnwoBuJWkdoQpvFM3FtjI9iqczebqL6g==
-----END X509 CRL-----
Certificate Revocation List (CRL):
        Version 1 (0x0)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: /C=FR/L=Levallois-Perret/O=Herve Schauer Consultants/CN=CA SSL
        Last Update: Jul 30 23:59:59 2008 GMT
        Next Update: Aug 30 23:59:59 2008 GMT
Revoked Certificates:
    Serial Number: 04
        Revocation Date: Jun 28 12:49:20 2008 GMT
    Signature Algorithm: md5WithRSAEncryption
        2d:5f:0e:74:5e:1c:98:a5:f7:da:9c:20:06:ad:cd:72:a2:72:
        [...]
        8b:ea