Krishna,
>m_pfCRLFile = fopen( m_pszCRLFile , "wb");
"wb" opens the file in write (binary) mode. But your intention is to read
the CRL. Change the mode to "rb" and check again.
-Sandeep
On Thu, Jan 7, 2010 at 10:12 PM, Radha krishna Meduri -X (radmedur - HCL at
Cisco) <radme...@cisco.com> wrote:
>
> Hi Experts
>
> I am writing simple standalone cpp program to read CRL file but could
> not. Please correct me If I miss anything in the program...I am getting
> "Unable to read CRL file" as in the last printf statement.
>
> #include "openssl/ssl.h"
> #include "stdio.h"
>
> int main()
> {
>
> FILE* m_pfCRLFile=0;
> const char* m_pszURL;
>
> const char* m_pszCRLFile = "test_pem.crl";
>
> printf("systhesized file name= %s\n", m_pszCRLFile);
>
> m_pfCRLFile = fopen( m_pszCRLFile , "wb");
>
> if( !m_pfCRLFile )
> {
> printf("Unable to open file %s for writing", m_pszCRLFile);
> exit(0);
> }
>
> X509_CRL *pCRL=0, *pTempCRL = 0;
>
> pCRL = d2i_X509_CRL_fp( m_pfCRLFile, &pTempCRL );
>
> if( !pCRL )
> {
> printf("Unable to read using d2i_X509_CRL_fp\n");
> pCRL = PEM_read_X509_CRL(m_pfCRLFile, &pTempCRL, NULL, 0);
> }
>
> if( !pCRL )
> {
> printf("Unable to read CRL file\n" );
> exit(0);
> }
>
> Thanks
> Radhakrishna.
>
> -----Original Message-----
> From: owner-openssl-us...@openssl.org
> [mailto:owner-openssl-us...@openssl.org] On Behalf Of Radha krishna
> Meduri -X (radmedur - HCL at Cisco)
> Sent: Thursday, December 24, 2009 11:23 AM
> To: openssl-users@openssl.org
> Subject: RE: Unable to load CRL
>
>
> Hi Steve
>
> I guess that is not the problem as I will be able to read same CRL file
> if I place CRL file into another webserver. I am not able to post CRL
> here as this is open alias.
>
> BTW I want to write test program to check the CRL file. Could you please
> share the same if you have any?
>
> Thanks
> Radhakrishna.
>
> -----Original Message-----
> From: owner-openssl-us...@openssl.org
> [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dr. Stephen Henson
> Sent: Monday, December 14, 2009 9:02 PM
> To: openssl-users@openssl.org
> Subject: Re: Unable to load CRL
>
> On Mon, Dec 14, 2009, Radha krishna Meduri -X (radmedur - HCL at Cisco)
> wrote:
>
> >
> > Hi Patrick
> >
> > We are using following code snippet to load CRL's.
> >
> > X509_CRL *pCRL, *pTempCRL = 0;
> > pCRL = d2i_X509_CRL_fp( pfCrlFile, &pTempCRL );
> >
> > if( !pCRL )
> > {
> > rewind(pfCrlFile);
> > pCRL = PEM_read_X509_CRL(pfCrlFile, &pTempCRL, NULL, 0); }
> >
> > rewind(pfCrlFile);
> >
> > if( !pCRL )
> > {
> > logEvent( MLOG_ERROR, RADIUS_C_SERVER, "Unable to read CRL file" );
> > break; }
> >
> > Ultimately we are getting "Unable to read CRL file" if we are loading
> > DER format CRL. Did you see anything wrong there?
> >
>
> Is the fp opened in binary mode? Text mode translation on that fp will
> corrupt the CRL loading in DER mode.
>
> Steve.
> --
> Dr Stephen N. Henson. OpenSSL project core developer.
> Commercial tech support now available see: http://www.openssl.org
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openssl-users@openssl.org
> Automated List Manager majord...@openssl.org
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openssl-users@openssl.org
> Automated List Manager majord...@openssl.org
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openssl-users@openssl.org
> Automated List Manager majord...@openssl.org
>
