Hi,
When using a CRL without the
nextUpdate field (you can create such CRL in iPlanet), I get a segmentation
fault (usingmod_ssl-2.8.8-1.3.24).
This occurs in the
call:
i =
X509_cmp_current_time(X509_CRL_get_nextUpdate(crl));
since
X509_CRL_get_nextUpdate(crl) returns NULL in this
Hi,
As i see in the mod_ssl code (i haven't tried it myself) when compiling with
SSL_EXPERIMENTAL_PROXY
there are several directives that can be used for this situation:
SSLProxyVerifyDepth
SSLProxyCACertificateFile
SSLProxyCACertificatePath
Hope this helps.
Regards,
Alon
-Original
