agl/crlset-tools

Tools for dealing with Chrome's CRLSets

crlset-tools's Issues

Flushing Cached CRLs for Proper Certificate Revocation Checking in Chrome

I have set up a custom Public Key Infrastructure (PKI) and deployed a server with a custom server certificate. During the SSL handshake process in Chrome, the browser downloaded a Certificate Revocation List (CRL) from my custom CRL distribution endpoint, which has a validity period of three months.

Recently, I revoked a certificate issued by the Certificate Authority (CA). However, when attempting to revisit my site, Chrome does not download the CRL again; it appears to be cached. I need assistance in understanding how to flush the cached CRLs to ensure proper certificate revocation checking.

Thank you for your help.

TLS How to verify CRL

Missing License File

I noticed that the crlset.go source file header mentions that the source is controlled by a license found in the LICENSE file. There is no LICENSE file included in the GitHub repository. Could you add the LICENSE file to the repository?

please add a LICENSE file

Please add a LICENSE or LICENSE.md file as described in https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/adding-a-license-to-a-repository

CRLSet truncated at header

I've been trying to use this tool for the last couple of days, but it seems that it doesn't work anymore. Has the format changed over the last couple of months since the tool was last updated?

Using it on Windows with Go 1.14.2, this is all I get:

go build .\crlset.go
.\crlset.exe fetch > crl-set
Downloading CRLSet version 5841
.\crlset.exe dump .\crl-set
CRLSet truncated at header

CRL truncated at serial

hi, I'm using this tool to get CRLset, but when i want to dump the CRLset it says "CRLSet truncated at serial". The version of CRLset is 7034. How to deal with this error?

recreate crlset-tools

someone asked me to create crlset-tools in another programming language. i'm having trouble
knowing what is happening after:
resp, err = http.Get(crxURL)
if err != nil {
fmt.Fprintf(os.Stderr, "Failed to get CRX: %s\n", err)
return false
}

could you point me to some documentation for this API?