Hi! In our project we want to perform a complete global switch to OCSP certificate verification (for a number of reasons we don't want CRL's anymore) to make openldap, openvpn and others use OCSP.
Unfortunately I didn't find any implemented way to perform such a switch in OpenSSL. There is only one check_revocation() function, which checks a chain against CRL's. I think that check_revocation() can be altered to use OCSP instead just like ocsp-app does. Or shall I use any other place to perform OCSP verification? Thanks! -- Best wishes, Alexander Komyagin ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
