Patching PHP's OpenSSL with CRL support

Moritz Bechler

Patching PHP's OpenSSL with CRL support Sat, Jan 6. 2007

I just submitted a patch to php.internals which includes CRL generation support into PHP's ext/openssl. You can also get it here: ext-openssl-crl.patch. Hopefully It will be integrated - I'm working on a CA solution based on PHP and phpSATk which will be used for certificate management in a WPA-EAP/EAP-TLS environment. So hopefully it will be integrated fast (- well I do not have big illusions here :-))


UPDATE: There was a problem in the extension source - updated
Posted by Moritz Bechler in PHP Comments: (3) Trackbacks: (0)

Trackbacks
Trackback specific URI for this entry

No Trackbacks

Comments
Display comments as (Linear | Threaded)

#1 - paco 2009-05-28 22:00 - (Reply)

Did you finished your project with the CA.I need do to such a project at school and i have problems with the CRL. Can u help me?

#1.1 - Moritz Bechler 2009-05-29 11:41 - (Reply)

I kind of did, but I needed only very specific features so its propably not of too much help for you. If you need CRL support will most likely have to go with a full-fledged solution like OpenCA (http://www.openca.org) or Dogtag (http://pki.fedoraproject.org/wiki/PKI_Main_Page). Both also offer OCSP (which is a much more maintainable alternativ to using CRLs) which you might also have a look at if your client software supports it.

#2 - Denis 2015-09-19 22:06 - (Reply)

Just for in case someone is looking for pure PHP implementation of CRL and so went on this page, here is my impl I've used for own CA project:
https://github.com/ukrbublik/openssl_x509_gencrl


Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.


You can use [geshi lang=lang_name [,ln={y|n}]][/geshi] tags to embed source code snippets.