Re: Estonian ID card CRL

Cannot replicate as using just one CRL gives me error 400.

Testing with openssl against largest CRL finishes in 2.2 seconds

$ time openssl verify -crl_check -CAfile ESTEID-SK_2011.pem -CRLfile esteid2011.crl.pem reinis-eid.pem
reinis-eid.pem: C = EE, O = ESTEID (DIGI-ID E-RESIDENT), OU = authentication, CN = "MIKELSONS,REINIS,39303280025", SN = MIKELSONS, GN = REINIS, serialNumber = 39303280025
error 23 at 0 depth lookup:certificate revoked
real 0m2.220s
user 0m1.752s
sys 0m0.464s

Latest unrevoced certificate against latest intermediate with CRL of 1.7MB finishes in 0.06 seconds
$ time openssl verify -crl_check -CAfile ESTEID-SK_2015.pem.crt -CRLfile esteid2015.crl.pem reinis_esteid-sk2015.pem
reinis_esteid-sk2015.pem: OK
real 0m0.062s
user 0m0.056s
sys 0m0.004s