RE: Verify include CRL

2009-09-28 Thread Smith, Ryan-P56787
Arno Garrels wrote: >Nima Sharifimehr wrote: >> When you specify the flag X509_V_FLAG_CRL_CHECK for the cert >> verification, then you will need to have a valid corresponding CRL >> for the last cert in the cert chain. And if you specify the flag >> X509_V_FLAG_CRL_CHECK then you will need to h

Re: Verify include CRL

2009-09-28 Thread Arno Garrels
Arno Garrels wrote: > However it fails as described in my > previous mail when I try to verify a cert on demand against some > custom store. Got it working now, don't ask me what was wrong in my code, guess it was just my bad testing. -- Arno Garrels

Re: Verify include CRL

2009-09-28 Thread Arno Garrels
Nima Sharifimehr wrote: > When you specify the flag X509_V_FLAG_CRL_CHECK for the cert > verification, then you will need to have a valid corresponding CRL > for the last cert in the cert chain. And if you specify the flag > X509_V_FLAG_CRL_CHECK then you will need to have corresponding CRLs > for

Re: Verify include CRL

2009-09-28 Thread Nima Sharifimehr
When you specify the flag X509_V_FLAG_CRL_CHECK for the cert verification, then you will need to have a valid corresponding CRL for the last cert in the cert chain. And if you specify the flag X509_V_FLAG_CRL_CHECK then you will need to have corresponding CRLs for all the certs available in the