Dateien ConfigsNew/ConfigsProd/CA/crlnumber und ConfigsNew/ConfigsTest/CA/crlnumber sind identisch. Dateien ConfigsNew/ConfigsProd/class3/crlnumber und ConfigsNew/ConfigsTest/class3/crlnumber sind identisch. diff -turNs ConfigsNew/ConfigsProd/class3-client.cnf ConfigsNew/ConfigsTest/class3-client.cnf --- ConfigsNew/ConfigsProd/class3-client.cnf 2018-11-10 13:04:51.777228727 +0100 +++ ConfigsNew/ConfigsTest/class3-client.cnf 2018-11-10 13:08:24.413839820 +0100 @@ -49,7 +49,7 @@ default_days = 200 # how long to certify for default_crl_days= 30 # how long before next CRL -default_md = sha512 # which md to use. +default_md = sha512 # which md to use. preserve = no # keep passed DN ordering # A few difference way of specifying how similar the request should look @@ -147,7 +147,7 @@ keyUsage = critical, digitalSignature, keyEncipherment, keyAgreement extendedKeyUsage = emailProtection, clientAuth, msEFS, msSGC, nsSGC authorityInfoAccess = OCSP;URI:http://ocsp.cacert.org -crlDistributionPoints = URI:http://crl.cacert.org/class3-revoke.crl +crlDistributionPoints = URI:http://test.cacert.org/test-class3-revoke.crl subjectAltName = email:copy @@ -159,7 +159,7 @@ [ v3_ca ] basicConstraints = CA:false -crlDistributionPoints = URI:http://www.CAcert.org/class3-revoke.crl +crlDistributionPoints = URI:http://test.cacert.org/test-class3-revoke.crl [ crl_ext ] diff -turNs ConfigsNew/ConfigsProd/openssl-client.cnf ConfigsNew/ConfigsTest/openssl-client.cnf --- ConfigsNew/ConfigsProd/openssl-client.cnf 2018-11-10 13:05:11.709286010 +0100 +++ ConfigsNew/ConfigsTest/openssl-client.cnf 2018-11-10 13:08:45.029899069 +0100 @@ -49,7 +49,7 @@ default_days = 200 # how long to certify for default_crl_days= 30 # how long before next CRL -default_md = sha512 # which md to use. +default_md = sha512 # which md to use. preserve = no # keep passed DN ordering # A few difference way of specifying how similar the request should look @@ -147,7 +147,7 @@ keyUsage = critical, digitalSignature, keyEncipherment, keyAgreement extendedKeyUsage = emailProtection, clientAuth, msEFS, msSGC, nsSGC authorityInfoAccess = OCSP;URI:http://ocsp.cacert.org -crlDistributionPoints = URI:http://crl.cacert.org/revoke.crl +crlDistributionPoints = URI:http://test.cacert.org/test-revoke.crl subjectAltName = email:copy @@ -159,7 +159,6 @@ [ v3_ca ] basicConstraints = CA:false -crlDistributionPoints = URI:http://www.CAcert.org/revoke.crl +crlDistributionPoints = URI:http://test.cacert.org/test-revoke.crl [ crl_ext ] -