Hi all, As read from many sources i understood that when a certificate is revoked it is no longer valid and CA keeps track of revoked certificates in certificate revokation list(CRL). We have Netscape Certificate Server as CA and keeps track of CRL. In my server(developed using stunnel and openssl) after getting the certificate from client i need to check whether client certificate is present in this Netscape CS Revocation List and then based on that the access to be given to the client. I have got the CRL onto a binary file cms.crl How do i support this CRL in my server? Is there any functions available in reading the cms.crl and checking against cms.crl file after getting the certificate from client. Thanks in advance. Asha This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. CREDIT SUISSE GROUP and each of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorised to state them to be the views of any such entity. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]