How to fetch a CRL directly from KCA LDAP database
Originally Published: 2002-12-16
Article Number
Applies To
Issue
Resolution
1. To retrieve PEM formatted CRL, you can use the following:
ldap://<KCA-host-name>:<LDAP-port>/md5=<MD5-of-the-CA>?certificaterevocationlist?
2. To retrieve the CRL in binary(DER), the following would work (*** Only when local CRL publishing is enabled):
ldap://<KCA-host-name>:<LDAP-port>/<DN-of-the-CA-cert>?certificaterevocationlist?
For example:
ldap://host.name:389:/c=us,st=ca,l=westerville,o=acme,ou=security,cn=myca?certificaterevocationlist?
Related Articles
SQL Exception in the RSA Identity Governance and Lifecycle UI while saving the workflow after rollback Number of Views Cisco Umbrella - SAML Relying Party Configuration - SecurID Access Implementation Guide Number of Views createChangeRequest Delete Account web serivce call not working in RSA Identity Management and Governance 6.9.1 Number of Views Cisco Umbrella - SAML SSO Agent Configuration - SecurID Access Implementation Guide Number of Views TalentLMS - SAML Relying Party Configuration -SecurID Access Implementation Guide Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA-2026-10: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities RSA SecurID Desktop Token 5.0.3 for Windows Administrator's Guide RSA-2026-05: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities RSA Authentication Manager Upgrade Process
Don't see what you're looking for?
