On Thu, Jul 15, 1999, lin geng wrote:

> I have a question concerning CRL handling. I found that OPENSSL is loading
> cert file and CRL using the same file name.  These are X509_load_crl_file
> and X509_load_cert_file (in by_file).  Is this by design?  Should this mean
> that the certificate (chain) and CRL are in the same file?

Just because the functions are able to load both CRLs and certs doesn't mean
that they have to be in the same file, of course.  The CRLs you configure with
different directives in mod_ssl. That internally the same loading functions
are used is not important here. Usually CRLs and certs are _not_ in the same
file.
                                       Ralf S. Engelschall
                                       [EMAIL PROTECTED]
                                       www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to