I think I am taking LDAPS where no one has gone before.  I need to perform CRL
(Certificate Revocation List) tests on a Net::LDAPS connection.

I found the necessary option in IO::Socket:SSL: SSL_check_crl

However Net::LDAPS does not seem to support it.  I poked around Net::LDAP.pm
and found a place to put it so it will pass on the value to IO::Socket::SSL.

At line 201 I added:
SSL_check_crl=$arg->{'checkcrl'} ? 1 : 0,

So I followed the docs in Net::SSLeay on where to place the CRL so the test
environment looks good.  So when I run it, perl crashes.  When the checkcrl
option is turned off no problems... CA testing works etc.

Can anyone offer any insight or a place to start looking?

My Envoronment:
Windows XP
Net::LDAP 0.32
Convert::ASN1 0.18
IO::Socket::SSL 1.26
openssl 0.98a
Net::SSLeay 1.26
Perl v5.8.6 (Active State build 811)

Thanks
Eric

Reply via email to