problem when importing CRL into Firefox

tklima · 06-11-2008, 08:00 AM

Hi,

I am wondering how to import a CRL generated by my certification authority into Firefox

I did the following:

Code:

openssl ca -gencrl -out my_crl.pem

and then converted into DER

Code:

openssl crl -in my_crl.pem -outform der -out my_crl.crl

When importing into Firefox I get an error message: The browser cannot import the Certificate Revocation List (CRL). Error
importing CRL to local Database. Error Code:ffffe009

There is no problem to import it into IE

If I try to use the default PEM format, it does not work either.

What am I doing wrong?

Thanks for your help

Tom.

mynesky · 12-21-2009, 05:44 AM

I have the same problem!!

i have created the crl, and when i download from Firefox, do this error 0000e009. From IE there arent error.

Thanks

Pada · 08-02-2010, 10:27 AM

I know that this is probably a bit late, but I've just had the same issue.

After I've changed the signature algorithm from sha-256 to md5 Firefox 3.6 was actually able to import my CRL!

So my guess is that the 'Error Importing CRL to local Database. Error Code:ffffe006' implies that Firefox doesn't understand the Hashing/Signature algorithm!

I hope this helps