@echo OFF
REM C:\CRL folder will contain the CRL retrieved from RCM
set TEMP=C:\crl
c:
REM Assuming ldapsearch tool is available under C:\ldapsearch folder
cd c:\ldapsearch
REM Assuming RCM is installed on rcmhost.domain.net and RCM Secure Directory Server LDAP port is 389
REM Assuming that the CRL being pulled is for CA with md5=<CA-MD5> (replace <CA-MD5> with actual md5)
ldapsearch -h rcmhost.domain.net -p 389 -1 -T -t -b \ "(&(objectclass=xuda_rl)(md5=<CA-MD5>))" revocationlist
cd c:\crl
REM Lets wait for 2 seconds:
choice /t 2 /d y
REM Replace name of the file from 'CAnickname.crl' to a filename with actual nickname of the CA and with file extension .crl
if exist ldapsearch-revocationlist* del CAnickname.crl
REM Add CRL header to the CRL file being created:
echo -----BEGIN X509 CRL----->>CAnickname.crl
REM Now push the PEM encoded CRL content to the new CRL file:
type ldapsearch-revocationlist* >>CAnickname.crl
REM If the last line in the new CRL file is not empty, need to add an empty line:
echo. >>CAnickname.crl
REM Add CRL footer to the CRL file:
echo -----END X509 CRL----->>CAnickname.crl
REM Now we can delete the ldapsearch result file
del ldapsearch-revocationlist*