Bin Lu <blu-3r7miqu9kmnr7s880jo...@public.gmane.org> writes: [...]
> if (dcrl) > { > ok = ctx->check_crl(ctx, dcrl); > if (!ok) > goto err; > ok = ctx->cert_crl(ctx, dcrl, x); ç this does not > run since dcrl is NULL > if (!ok) > goto err; > } > else > ok = 1; ç so always return success and the next bit of code is: /* Don't look in full CRL if delta reason is removefromCRL */ if (ok != 2) { ok = ctx->cert_crl(ctx, crl, x); if (!ok) goto err; } so ctx->cert_crl is being called. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org