check a certificate in CRL

19 Nov 2008 8:42 PM

lobrys

Hello

a security question :

I developp a C# application that use certificate. I must check
validity of these certificates...

how to see if a certificate is revoked in a CRL (revocation list) ?
how to open a CRL file in C#, or maybe using Windows DLL....?

Thanks by advance!
Syl

20 Nov 2008 3:33 AM

Joe Kaplan

The better option would be to build an X509Chain object and use the various
options available on it to check the validity of the chain including
revocation status. .NET doesn't offer any low level APIs to check a CRL
directly, so you would need to p/invoke that type of thing in the cryptoAPI
if you want to hit it at that low a level. It usually isn't a good idea to
try to build this yourself though.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net

Show quoteHide quote

"lobrys" <lob***@gmail.com> wrote in message
news:fdd325e7-18ce-430a-9b2f-f5ec0aee9246@l42g2000yqe.googlegroups.com...
> Hello
>
> a security question :
>
> I developp a C# application that use certificate. I must check
> validity of these certificates...
>
> how to see if a certificate is revoked in a CRL (revocation list) ?
> how to open a CRL file in C#, or maybe using Windows DLL....?
>
>
> Thanks by advance!
> Syl