Re: CRL reload question

2013-09-29 Thread Dr. Stephen Henson
On Sun, Sep 29, 2013, Markus Moeller wrote: > > Hi Stephen, > > Thank you for the quick reply. Looking at 1.0.1e I see in the > source of X509_STORE_add_crl > > if (X509_OBJECT_retrieve_match(ctx->objs, obj)) >{ >X509_OBJECT_free_contents(obj); >OPENSSL_free(obj); >

Re: CRL reload question

2013-09-29 Thread Markus Moeller
Hi Stephen, Thank you for the quick reply. Looking at 1.0.1e I see in the source of X509_STORE_add_crl if (X509_OBJECT_retrieve_match(ctx->objs, obj)) { X509_OBJECT_free_contents(obj); OPENSSL_free(obj); X509err(X509_F_X509_STORE_ADD_CRL,X509_R_CERT_ALREADY_IN_HA

Re: CRL reload question

2013-09-29 Thread Dr. Stephen Henson
On Sun, Sep 29, 2013, Markus Moeller wrote: > Hi, > >How do I correctly re-loading CRLs ? I use X509_STORE_add_crl but get an > error: > > error:0B07D065:x509 certificate routines:X509_STORE_add_crl:cert already in > hash table > > Even if the CRL was updated I get the same error. Do

CRL reload question

2013-09-29 Thread Markus Moeller
Hi, How do I correctly re-loading CRLs ? I use X509_STORE_add_crl but get an error: error:0B07D065:x509 certificate routines:X509_STORE_add_crl:cert already in hash table Even if the CRL was updated I get the same error. Do I need to clear the store first ? If so how ? I use opens