lin geng schrieb:
> 
> Thanks Ralf.
> 
> I have a question concerning CRL handling. I found that OPENSSL is loading
> cert file and CRL using the same file name.  These are X509_load_crl_file
> and X509_load_cert_file (in by_file).  Is this by design?  Should this mean
> that the certificate (chain) and CRL are in the same file?

1.) The file name should differ to make administartion easier.
2.) Mixing cert and crl into one file is possible since
    the loading routines you mentioned are looking for the
    ----- BEGIN CERTIFICATE / CRL ----- line. It works the
    same way as a single file with cert and private key.

-- 
Holger Reif                  Tel.: +49 361 74707-0
SmartRing GmbH               Fax.: +49 361 7470720
Europaplatz 5             [EMAIL PROTECTED]
D-99091 Erfurt                    WWW.SmartRing.de
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to