Oops, it's not working.
The problem also appears when the 2B CA is validated, meaning it's checking the Root CRL, so the Root CA will need a non-critical extension in the CRL as well:
isDeltaCRL: crl issuer CN=UK e-Science Root, OU=Authority, O=eScienceRoot, C=UK
isDeltaCRL: getCriticalExtensionOIDs returned null
Cheers,
Robert
On 05/12/17 13:16, Jensen, Jens (STFC,RAL,SC) wrote:
> Right, I finally had enough time to create a fresh CRL with an extension
> (the AKI) and get it pushed through the system. It should now propagate
> out to the world...
>
> Let us know if it works (or if it breaks something else...)
>
> Cheers
> --jens
>
|