CRL over LDAP
CRL over LDAP is an add-on for Mozilla Thunderbird 2 and 3 which allows import of Certificate Revocation Lists (CRL) from LDAP directories. It adds the support feature of LDAP URLs in the import window of the CRL manager and schedules auto-updates of these CRLs.
- CRL auto-update from HTTP/FTP (integrated in Thunderbird) and LDAP (with this add-on) is broken due to NSS bug #371522. A fix has been proposed and accepted and is now integrated in NSS. Thunderbird, since version 18.104.22.168, and Trustedbird (Thunderbird with additional features) are available with a fixed auto-update feature. This CRL over LDAP add-on provides also a workaround for this bug, working with all versions of Thunderbird (for HTTP/FTP and LDAP URLs).
- CRL manager window is not refreshed when a CRL is imported: #104137.
- LDAP authentication is not supported.
The CRL must be stored in DER format in a LDAP attribute value.
In the import window of the CRL manager, provide a LDAP URL following this syntax:
- e.g.: ldap://10.1.2.3/dc=milimail,dc=org?certificateRevocationList;binary?sub?cn=crl