Re: Issue when verifying an expired certificate

2012-06-20 Thread Francis GASCHET
For the ones who it can help : In 0.9.8, the the various fields in the 'ctx' structure passed to the call-back function were documented with relevant values. I used to access directly to them. With 1.0 this became false. As a consequence, the use of the "access primitives"to these values, lik

Re: Issue when verifying an expired certificate

2012-06-19 Thread Francis GASCHET
Hello Dave, If you suppose I use the directory hashed in 0.9.8 : no. The directory is re-hashed each time we verify a certificate. And CRLs are explicitly read and loaded one by one with X509_STORE_add_crl. So, either i misunderstood your comment or I fear this is not the cause of my problem..

RE: Issue when verifying an expired certificate

2012-06-18 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Francis GASCHET > Sent: Monday, 18 June, 2012 12:06 > In my application, I met some problem when verifying a > certificate which is expired. It worked perfectly in 0.9.8 > and I get the X509_V_ERR_CERT_HAS_EXPIRED error code, > The same code