lin geng schrieb:
>
> Thanks Ralf.
>
> I have a question concerning CRL handling. I found that OPENSSL is loading
> cert file and CRL using the same file name. These are X509_load_crl_file
> and X509_load_cert_file (in by_file). Is this by design? Should this mean
> that the certificate (chain) and CRL are in the same file?
1.) The file name should differ to make administartion easier.
2.) Mixing cert and crl into one file is possible since
the loading routines you mentioned are looking for the
----- BEGIN CERTIFICATE / CRL ----- line. It works the
same way as a single file with cert and private key.
--
Holger Reif Tel.: +49 361 74707-0
SmartRing GmbH Fax.: +49 361 7470720
Europaplatz 5 [EMAIL PROTECTED]
D-99091 Erfurt WWW.SmartRing.de
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]