I applied the patch this morning and the server seems to be perfectly
stable, even under conditions with a bazillion simultaneous in-bound
connections. I'll keep an eye on it but I think your patch nailed the
problem.
Thanks!
On Aug 28, 2004, at 5:40 PM, Dr. Stephen Henson wrote:
I've attached a preliminary patch. It resolves the issue by avoiding
the
reordering of the revoked entries but has a side effect that CRLs no
longer
print out their original order.
Let me know of any problems.
I'll work out a cleaner fix later and commit it.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]