In article <[EMAIL PROTECTED]> you wrote:
>[...]
> There is some unimplemented or under used code which looks like it could
> handle lookups of CRLs, and private keys as well.
>[...]
The stuff at least works already fine for CRLs. I've the last days implemented
SSLCARevocationPath and SSLCARevocationFile directives for Apache/mod_ssl and
I finally needed no kludges. It worked out of the box by using the various
X509_STORE_xxx() and X509_LOOKUP_xxx() functions. So at least the looking up
of CRLs in a file and in a hash dir already works as expected.
But you're correct: The whole stuff is very rudimentary and it would be
_great_ to have a more powerful API to maintain such storages. Your
suggestions and ideas sound very good. Go for it, Steve.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
