I am trying to check for revocation of my certificate. I have CAcert certificate. It takes around 1hour for crlClient and also for OCSP to complete revocation checking of certificate.
Asked
Active
Viewed 46 times
1
-
4What's the question? – Mark Pattison May 26 '16 at 11:57
-
How long does it take to download the CRL when using the Java API? – Michaël Demey May 26 '16 at 12:21
-
2The CRLs by CACert are monstruous because (1.) they don't clean up expired certificates, (2.) they don't create sufficient intermediary certificates, (3.) the certificates are free which makes the threshold to revoke a certificate low. The real question would be: *Hey CACert, can you do something about your huge CRLs?* – Bruno Lowagie May 26 '16 at 13:22
-
It helps to use a local cache of the CRL. We had a similar issue in the iText tests, we also had to use CRL caching. – Amedee Van Gasse May 26 '16 at 14:40
-
It takes around 1hour to download crl file. It's a 7MB file – Shubham Gupta May 27 '16 at 06:26