X509CRL problems?

[Francis Libble]

I am currently trying to validate a commercial (Verisign) CRL using
java, however, the attached sample code:

CertificateFactory certificatefactory =
CertificateFactory.getInstance("X.509");
FileInputStream fileinputstream = new FileInputStream("test.crl");
X509CRL x509crl = (X509CRL)certificatefactory.generateCRL(fileinputstream);

results in the following exception:

java.security.cert.CRLException: Parsing error:
DerInputStream.getLength(): leng
thTag=127, too big.
at sun.security.x509.X509CRLImpl.<init>(Unknown Source)
at sun.security.provider.X509Factory.engineGenerateCRL(Unknown
Source)
at java.security.cert.CertificateFactory.generateCRL(Unknown
Source)

Any ideas?

Thanks

Flibble

[Ron C.]

This seems to indicate a DER decoding failure of the CRL. You might want to
verify that the contents of 'test.crl' is a proper DER encoding.

Ron

"Francis Libble" <garyo...@yahoo.co.uk> wrote in message
news:955f45df.01092...@posting.google.com...