On Thu, Mar 02, 2006, Venkata Sairam wrote: > Hi > > I have the PKCS7 object signed by a certificate. The certificate is revoked > and I have the corresponding CRL. I have the certificate in the certs > variable and the CRL in the store variable. I am using the method below: > > int PKCS7_verify(PKCS7 *p7, STACK_OF(X509) *certs, X509_STORE *store, BIO > *indata, BIO *out, int flags); > > Does the method PKCS7_verify verify the certificates in 'certs' against the > CRLs present in the 'store'? >
If the crl checking flags are set in the store yes. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
