How to distribute a CRL

Question

hey,
i have stored a crl on an ldap server and i was wondering how i can distribute it to users.
i tried for example to import it into firefox, simply by entering the ldap link, but doesn't work
i heard already a lot about the extension distributionPoint, but i don't know how to use it, and what to set as value.
so do i have to add that extension to my crl, or any other extension. or do i need to change something on the ldap server?
here is the code of my crl:
public X509CRL createCRL(BigInteger certSerial) throws CertificateParsingException, NoSuchProviderException, SignatureException, InvalidKeyException{
     Date now = new Date();
     X509V2CRLGenerator crlGen = new X509V2CRLGenerator();
     crlGen.setIssuerDN(_CA_CERT.getSubjectX500Principal());
     crlGen.setThisUpdate(now);
     crlGen.setSignatureAlgorithm("SHA256WithRSAEncryption");
     crlGen.addCRLEntry(certSerial, now, CRLReason.unspecified);
     crlGen.addExtension(X509Extensions.AuthorityKeyIdentifier,
          false, new AuthorityKeyIdentifierStructure(_CA_CERT));
     return crlGen.generateX509CRL(_CA_PRIV_KEY, "BC");
}many thanks
toto

Answer 1

I haven't used Netbeans for more than 5 minutes, but in Eclipse it is fairly straightforward: rightclick the project, choose Export and finally choose the format and destination. See if you don't see something like that in Netbeans. Think logically.