473,385 Members | 1,641 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,385 software developers and data experts.

Certificate Validation using CRLs

27
I am trying to have a SslStream client and an SslStream server mutually authenticate and communicate with each other, over TCP. So when I call the methods AuthenticateAsClient() and AuthenticateAsServer() with CRL checking disabled (last argument: false) everything works fine.

Now I want to incorporate CRL checking during the validation process. When I specify the CRL checking argument: true, I get RemoteCertificateChainErrors on both the client and the server (This holds true for certificates generated using makecert as well as certificates generated using OpenSSL).

After some initial research, I am tilting towards X509Chain class which seems to do what I want to do for verifying a certificate chain. It has the RevocationPolicy.RevocationMode which can be set to Online(needs the online URL to the CRL), Offline(uses cached CRL) or NoCheck.

I need to know how to specify the location of the CRL in this case. I have two certificates in my certificate store, and I have a CRL which stores revocation information for these two certificates. Now what shud go where so that the app can know where and what to look for while validating a certificate.

Can anyone please shed more light on this certificate validation using CRLs process?
Mar 22 '07 #1
0 1519

Sign in to post your reply or Sign up for a free account.

Similar topics

4
by: Matt Frame | last post by:
I am working on a special ASP.Net application that receives files from customers. The connection is made via HTTPS and the client sends the file as a POST to my ASP.Net listener. All of this...
3
by: jmhmaine | last post by:
How do I programmatically read an SSL certificate when using connecting with WebClient? I need to verify the domain name matches the certificate and that the Expiration Date is valid before I post...
0
by: jens Jensen | last post by:
Hello, I'm trying to connect to a system via https. As an additional security measure, the server requires me to attach an x509 certs to my "HTTP POST" request. I get the error...
0
by: alessio.cesana | last post by:
Hi everybody, hope someone can help me. I have to send an authenticated mail message throught an ssl smtp server using .net 1.1 framework libraries. The problem is that server certificate is not...
1
by: Yogesh Chawla - PD | last post by:
Hello All, I work for the State of Wisconsin and we are trying to build a reference implementation using python. Our goals are this: 1) establish an HTTPS connection between our client and...
1
by: mike | last post by:
I am trying to implement FtpWebRequest with EnableSsl = true. The WS_FTP server has our VeriSign Server Certificate installed and with the WS_FTP Pro client am able to connect. However, with...
3
by: Carmine [www.thetotalsite.it] | last post by:
Hi, I'm trying to use gmail smtp server for an asp.net application, but when I try to send an email I get this error: "The remote certificate is invalid according to the validation procedure." ...
2
by: Yves Gagnon | last post by:
Hi, I need to develop a WCF on a ms certificat autority that will revoke an existing certificate. My question: how to do that ? witch tool (c#) ? Do you have sample code that do that ? Thanks...
3
AnuSumesh
by: AnuSumesh | last post by:
Hi, I have developed one application which should be accessible only if valid certificate from particular CA is installed on client browser . I am using VBscript for writing the code. I am...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...
0
by: ryjfgjl | last post by:
In our work, we often need to import Excel data into databases (such as MySQL, SQL Server, Oracle) for data analysis and processing. Usually, we use database tools like Navicat or the Excel import...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: aa123db | last post by:
Variable and constants Use var or let for variables and const fror constants. Var foo ='bar'; Let foo ='bar';const baz ='bar'; Functions function $name$ ($parameters$) { } ...
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.