Reputation: 11
I'm searching for an implementation in C# or Java of the algorithm to combine CRL with delta CRL as described in RFC5280.
I'm working on web authentication with the portuguese eID smart card "Cartão de Cidadão" and other similar tokens with authentication certificates which have CRL and delta-CRL.
In our system we do not use SSL renegotiation for very specific security reasons (web applications are also used in citizen presential support and the SSL authentication of the user agent forces the systematic close of all instances between each different authentication).
We are using OCSP, but now we have also to programmatically check certificates' validity in some specific cases using CRL and delta CRL .
Can anyone please direct me to a correct path to avoid reinventing the wheel?
Upvotes: 1
Views: 470