> What date are you verifying your certificate against ?
Current date and time. CERT_VerifyCertificateNow() (should) use current date
and time and that is what I need.
This is my code sample:
SECStatus s = CERT_VerifyCertificateNow(
CERT_GetDefaultCertDB(),
pCertContext,
PR_TRUE,
certificateUsageAnyCA,
NULL,
&out);
if (s == SECFailure) {
//an error occured
}
> If that's not it, then you will need to step through the code in the CRL
> cache. Assuming you are using NSS 3.10 (NSS_3_10_RTM) I suggest you start
> with DPCache_FetchFromTokens and find out if the CRL is found during the
> verification.
I haven't compiled NSS by myself. I'm using Windows precompiled binaries. :(
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto