Search code examples
javacertificatecer

How to generate a CRL (certificate revocation list) file

I'm using self-signed certificates for testing, how can I generate certificate revocation list to test cert verification? Has keytool in JDK provided such functionalities?

Thanks!

Solution

  • OpenSSL http://www.openssl.org/

    The CA (included) is excellent for testing simple PKIs. Perhaps a little bit daunting at first, but there is plenty of info around.

    For CRLs, the out of the box setup should do the trick for you: https://www.openssl.org/docs/manmaster/man1/ca.html#CRL-OPTIONS

    All the best.