just came across this while attempting to work out how to do crl checking. >From yesterdays openssl snapshot openssl-0.9.8-stable-SNAP-20080517.tar.gz
I assume the second branch is unreachable. ./apps/s_server.c line 308 else if (strcmp(*argv,"-crl_check") == 0) { vflags |= X509_V_FLAG_CRL_CHECK; } else if (strcmp(*argv,"-crl_check") == 0) { vflags |= X509_V_FLAG_CRL_CHECK| X509_V_FLAG_CRL_CHECK_ALL; } appoligies for the dup on openssl-dev@ - only just found the rt. -- Daniel Black -- Proudly a Gentoo Linux User. Gnu-PG/PGP signed and encrypted email preferred http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x76677097 GPG Signature D934 5397 A84A 6366 9687 9EB2 861A 4ABA 7667 7097
signature.asc
Description: PGP signature