Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

CAs say few people are getting replacements

Posted Jun 17, 2008 2:41 UTC (Tue) by ringerc (subscriber, #3071)
In reply to: CAs say few people are getting replacements by flewellyn
Parent article: SSL Certificates Vulnerable to OpenSSL Flaw on Debian (Netcraft)

As far as I know most user-agents don't support, or check, a CRL. From what I've seen support
generally requires user/admin configuration and mostly seems to get used on SOE setups and
corporate intranets.

(Log in to post comments)

Posted Jun 20, 2008 16:43 UTC (Fri) by akumria (subscriber, #7773) [Link]

I think OSCP would do what you are after.

It is part of Firefox 3.0, so it probably fairly widely deployed (by now).