160k views
4 votes
What are the steps in realising the Cert has been Revoked?

User Rockdaboot
by
8.2k points

1 Answer

4 votes

Final answer:

To realize a Certificate has been Revoked, one establishes a secure connection, checks the certificate's revocation status through OCSP or CRL, and upon finding it revoked, receives a notification and aborts the connection.

Step-by-step explanation:

To realize that a Certificate has been Revoked, it is important to understand the process of certificate revocation checks. A certificate can be revoked for several reasons such as if the private key is compromised or if the certificate was issued improperly. Here are the typical steps you would follow:

  1. Attempt to establish a secure connection using the certificate (such as an SSL/TLS connection).
  2. The client (e.g., a web browser) checks if the certificate is still valid by reaching out to the certificate authority (CA) or consulting a revocation list.
  3. If the certificate has been revoked, this check will fail, and the client should receive a notification or warning.
  4. The client should then abort the connection attempt to maintain security.

Technologies used to check the revocation status include the Online Certificate Status Protocol (OCSP) and Certificate Revocation Lists (CRLs).

User Alessandro Peca
by
8.3k points