How to generate a CRL (certificate revocation list) file

11.3k Views Asked by At

I'm using self-signed certificates for testing, how can I generate certificate revocation list to test cert verification? Has keytool in JDK provided such functionalities?

Thanks!

1

There are 1 best solutions below

1
On BEST ANSWER

OpenSSL http://www.openssl.org/

The CA (included) is excellent for testing simple PKIs. Perhaps a little bit daunting at first, but there is plenty of info around.

For CRLs, the out of the box setup should do the trick for you: https://www.openssl.org/docs/manmaster/man1/ca.html#CRL-OPTIONS

All the best.