--- "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote:
> So *in this case* that critical extension can be safely
> ignored.
but then for sanity check, if I made a script to get all revoked
serial numbers on that CRL then comparing user certificate´s
serial number with the ones in the CRL´s list; will that be
considered an "OK" verification?
cheers,
Eddy
__________________________________
Do you Yahoo!?
Yahoo! Small Business - Try our new resources site!
http://smallbusiness.yahoo.com/resources/
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
