> What date are you verifying your certificate against ?
Current date and time. CERT_VerifyCertificateNow() (should) use current date 
and time and that is what I need.

This is my code sample:

SECStatus s = CERT_VerifyCertificateNow(
                        CERT_GetDefaultCertDB(),
                        pCertContext,
                        PR_TRUE,
                        certificateUsageAnyCA,
                        NULL,
                        &out);

if (s == SECFailure) {
  //an error occured
}

> If that's not it, then you will need to step through the code in the CRL 
> cache. Assuming you are using NSS 3.10 (NSS_3_10_RTM) I suggest you start 
> with DPCache_FetchFromTokens and find out if the CRL is found during the 
> verification.
I haven't compiled NSS by myself. I'm using Windows precompiled binaries. :( 


_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to