Re: Can CRL Be Hacked?

From: Lucas Galfaso (lgalfaso_at_NO_CAPSfd.com.ar)
Date: 02/06/04

Next message: lelteto: "RE: How to make CA recognise CSP other then Gemplus ?"
Previous message: lelteto: "RE: HOW TO: Programmatic logon like autologon?"
In reply to: bdwise: "Can CRL Be Hacked?"
Next in thread: Krish Shenoy[MSFT]: "Re: Can CRL Be Hacked?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Fri, 6 Feb 2004 13:45:50 -0300

It cannot be change without invalidating it.
"bdwise" <bradwiseathome@hotmail.com> wrote in message
news:59c05c40.0402060801.17849e29@posting.google.com...
> If I distribute my (Win2K Stand Alone) CA public key and CRL to
> anyone, can they modify the CRL? I understand that the CA can't be
> changed without rendering it useless, but I am not sure about the CRL.
>
> Thanks.

Next message: lelteto: "RE: How to make CA recognise CSP other then Gemplus ?"
Previous message: lelteto: "RE: HOW TO: Programmatic logon like autologon?"
In reply to: bdwise: "Can CRL Be Hacked?"
Next in thread: Krish Shenoy[MSFT]: "Re: Can CRL Be Hacked?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: Problem with IIS5 - "expired" CRLs not working?
... If no CRL was in the ICA store (deleted from store using CertMgr.exe and ... As I continued testing, I eventually got a Win2K AS CD from my company, ... we're using these same test CRLs in a couple of different ...
(microsoft.public.platformsdk.security)
Re: Problem with IIS5 - "expired" CRLs not working?
... If no CRL was in the ICA store (deleted from store using CertMgr.exe and ... As I continued testing, I eventually got a Win2K AS CD from my company, ... we're using these same test CRLs in a couple of different ...
(microsoft.public.inetserver.iis.security)
Re: Problem with IIS5 - "expired" CRLs not working?
... Prior to doing the clean Win2K3 installation, ... forth between Win2K AS and Win2K3. ... > CRL stored in the ICA, and in this initial configuration, IIS6 did allow ... > period checking), and after that, I deleted the CRL from the ICA. ...
(microsoft.public.platformsdk.security)
Re: Problem with IIS5 - "expired" CRLs not working?
... Prior to doing the clean Win2K3 installation, ... forth between Win2K AS and Win2K3. ... > CRL stored in the ICA, and in this initial configuration, IIS6 did allow ... > period checking), and after that, I deleted the CRL from the ICA. ...
(microsoft.public.inetserver.iis.security)
Re: Can CRL Be Hacked?
... > If I distribute my (Win2K Stand Alone) CA public key and CRL to ... can they modify the CRL? ...
(microsoft.public.platformsdk.security)