[Mozilla Enterprise] Revoking internal intermediate CA certificate

[Martin Germann]

I looks like Firefox is not checking intermediate CA certificates using OCSP
or CRL's. Found some sites saying that intermediate CA revocation
information is published using OneCRL (not sure if this information is
accurate).

That means that if I have an internal CA and would need to revoke an
intermediate CA certificate signed by my root CA, Firefox would never
notice. Any way to solve this?

 

Regards,

Martin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20210310/b02f681f/attachment.html>