Hello, There seems to be a problem with X509_load_crl_file() function. It occasionally fails on perfectly valid PEM crl files (in my case with 101 code). I traced the problem to non-reset error context. It can be fixed by placing ERR_clear_error() call at the beginning of the function. I can post a sample code demonstrating the bug if somebody is interested. I'm using a slightly outdated 0.9.7c version but I've checked the latest 0.9.7e version and it seems to have the same bug.
Alex Fishman ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]