Hi, When I set the store verify flags to either X509_V_FLAG_CRL_CHECK or to "X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL" verification always fails with error X509_V_ERR_UNABLE_TO_GET_CRL for certs _not_ revoked. Revoked certs however are identified correctly with verify result X509_V_ERR_CERT_REVOKED. It doesn't make a difference whether I use X509_load_crl_file() or X509_STORE_add_crl().
What am I doing wrong? -- Arno Garrels ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
