RE: Client script access to server cert info

What all of you are referring to is known as a "Certificate Revocation List" and that is the one part of the current PKI standard that is largely NOT implemented. Even if you had JavaScript or some other bit of code to do the checking most Certificate Authorities simply don't support the checking.

If you are looking to implement this on your own private CA, I would suggest that you create and LDAP server and load the certs in there. Anything that cannot be verified against the cert in the LDAP would be invalid and the transaction processing would then stop.

HTH, At 5:48 PM +0200 4/16/03, Dawes, Rogan (ZA - Johannesburg) wrote:
>I did a quick search for Tony's search term, and it looks like he was

-- 
Thanks,

Ms. Jimi Thompson, CISSP, Rev.

"I'm a great believer in luck, and I find the harder I work, the more 
I have of it." -- Thomas Jefferson