Re: Loading CRL to Client

[am0ykam0te (sent by Nabble.com)]

I tried using these 3 code snippets but my client still accepts the server certificate I included in the CRL.BTW Im using OpenSSL 0.9.6h

pStore = SSL_CTX_get_cert_store(ctx);
pLookup = X509_STORE_add_lookup(pStore, X509_LOOKUP_file());
ret = X509_load_cert_crl_file(pLookup,clientCRL,X509_FILETYPE_PEM);
------------------------
pStore = SSL_CTX_get_cert_store(ctx);
crl = d2i_X509_CRL_fp(fCRL,NULL);
ret = X509_STORE_add_crl(pStore, crl);
------------------------
pStore = SSL_CTX_get_cert_store(ctx);
pLookup = X509_STORE_add_lookup(pStore, X509_LOOKUP_file());
ret = X509_load_crl_file( pLookup, clientCRL,X509_FILETYPE_PEM);

---

View this message in context: Re: Loading CRL to Client
Sent from the OpenSSL - Dev forum at Nabble.com.