Erwann Abalea <eabalea@gmail.com> wrote:

> It considers that the CRL found at "hash".r0 isn't valid or sufficient to
> give a revocation status of your certificate.
> Could you post the subscriber certificate, its issuing CA cert, and the
> corresponding CRL somewhere?

I found the problem: it was not signed by the right CA (same private
key, different cert)

--
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org