Hello everyone, I have a question about the crl in ssl server, I load the crl's file successed, but when one new connection come in, SSL_accept return NULL, whether the client cert is in crl's file.l certainly if I didn't load crl file, the ssl server is very ok.
and the ssl_accept return the error msg: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned the code: int ret = SSL_CTX_load_verify_locations(ap_ctx, a_revokeCrl.c_str(), NULL); if ( ret == 0 ) { printf("SSL_CTX_load_verify_locations(crl) return 0."); } else { X509_STORE *pCaCertStore = SSL_CTX_get_cert_store(ap_ctx); X509_STORE_set_flags(pCaCertStore, X509_V_FLAG_CRL_CHECK); } openssl version:OpenSSL 0.9.8k This question was puzzled me two days, please superman help me, thank u very much! best regards!