Abstract: Efficient certificate revocation list (CRL) processing is disclosed. A desired modification to an encoded CRL is determined. A computing device sequentially processes, during a first pass, a first CRL stream comprising the CRL to identify a CRL length difference between the CRL and a modified CRL based on the desired modification. The computing device sequentially processes, during a second pass, a second CRL stream comprising the CRL. The computing device, during the second pass, streams a modified encoded header portion to a modified CRL stream that identifies a new length of the modified CRL based on the length difference, streams a modified encoded CRL entries portion comprising a plurality of CRL entries to the modified CRL stream that contains the desired modification, and streams a modified encoded trailer portion to the modified CRL stream that contains a new digital signature based on the desired modification.

Abstract: Efficient certificate revocation list (CRL) processing is disclosed. A desired modification to an encoded CRL is determined. A computing device sequentially processes, during a first pass, a first CRL stream comprising the CRL to identify a CRL length difference between the CRL and a modified CRL based on the desired modification. The computing device sequentially processes, during a second pass, a second CRL stream comprising the CRL. The computing device, during the second pass, streams a modified encoded header portion to a modified CRL stream that identifies a new length of the modified CRL based on the length difference, streams a modified encoded CRL entries portion comprising a plurality of CRL entries to the modified CRL stream that contains the desired modification, and streams a modified encoded trailer portion to the modified CRL stream that contains a new digital signature based on the desired modification.

Abstract: Embodiments relate to systems and methods for generating a remote system inventory capable of differential update reports. A network management server communicates with a set of hosts, e.g. local servers, each in turn serving a set of client computers or other targets. A systems administrator can interrogate any target and/or host to receive an inventory of the hardware, software, or other resources installed on the subject machine. The resulting inventory report can be stored as a tree, database, or other record based on the host name of the host or target being inventoried. A series of inventory reports generated over time can be stored. The systems administrator can access the inventory data store and generate comparative or differential reports on the inventory of a subject machine captured at different times. Differential updates can be transmitted to an administrator or other user via an RSS or other feed.