Certificate Revocation List (CRL)
- •
def
- •
a list, maintained by a certificate authority, of certificates that have been revoked and are no longer trusted — can contain many revocations in a large file, and changes frequently for many different reasons
- •
- •
analogy
- •
similar to a "no fly list" for certificates
- •
- •
example
- •
Heartbleed (CVE-2014-0160, April 2014) — an OpenSSL flaw put the private keys of affected web servers at risk; every affected web server certificate had to be replaced, and the older certificates were moved to the CRL
- •
- •
- •