Bin Lu <blu-3r7miqu9kmnr7s880jo...@public.gmane.org> writes:
[...]
> if (dcrl)
> {
> ok = ctx->check_crl(ctx, dcrl);
> if (!ok)
> goto err;
> ok = ctx->cert_crl(ctx, dcrl, x); ç this does not
> run since dcrl is NULL
> if (!ok)
> goto err;
> }
> else
> ok = 1; ç so always return success
and the next bit of code is:
/* Don't look in full CRL if delta reason is removefromCRL */
if (ok != 2)
{
ok = ctx->cert_crl(ctx, crl, x);
if (!ok)
goto err;
}
so ctx->cert_crl is being called.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
