Topic: Is wolfSSL still using CRLs to validate certificate validity?

Hello Developer,

I would like to inquire whether wolfSSL still uses CRLs to validate certificate validity, or if wolfSSL still has the capability to use CRLs for certificate validation.

Share

Re: Is wolfSSL still using CRLs to validate certificate validity?

Hello Happy,

We do support CRLs which you can enable by building wolfSSL with --enable-crl.  To activate support at runtime, call wolfSSL_CTX_EnableCRL followed by wolfSSL_CTX_LoadCRL.  You can find documentation for these functions here: https://www.wolfssl.com/documentation/m … tx_loadcrl

Thanks,
Kareem

Share

Re: Is wolfSSL still using CRLs to validate certificate validity?

Hello developer, if wolfSSL is built without using the --enable-crl option to enable CRL, does wolfSSL default to using OCSP for certificate revocation?

Share

Re: Is wolfSSL still using CRLs to validate certificate validity?

We do not enable OCSP by default, you need to define HAVE_OCSP, then call wolfSSL_EnableOCSP to enable it: https://www.wolfssl.com/documentation/m … enableocsp

Share

Re: Is wolfSSL still using CRLs to validate certificate validity?

Hello, developer:
The default certificate revocation mechanism used by wolfSSL is what? Or does it default to not enabling any certificate revocation mechanism?

Share