CA认证管理系统中证书撤消机制的研究与实现

Research and Implementation of the Certificate Revocation for Certificate Authority

在PKI系统中,证书撤消信息的分发是通常限制PKI大规模部署的一个重要因素,该文在对RFC2459中所规定的证书撤消机制进行分析的基础上,在CA认证管理系统中设计和实现了证书撤消机制,使用户可以根据自己的情况选择合适的撤消方法。

The distribution of revocation information is usually the most costly aspect of running a large scale PKI . Based on the distribution of revocation information in RFC2459, this paper describes the design and implementation of certificate revocation for CA .