CRL checks on x509 certificate using get_crl callback vs manually calling store->check_crl

Hi, We are using openssl in our application for secure socket communications. What is the best way to check for revocation status of an x509 certificate using CRLs. 1) Register a callback to store context's get_crl function . In the call back function, load the crl and return. 2) Let openssl fi

get_crl callback

Hi, Is setting X509_STORE_CTX->get_crl to my-call-back-function a right way of getting a call back to load the crl for the X509 certificate. Thanks, Arun

get_crl : callback to download CRL

Hi, How do I register the callback to download CRL for the SSL certificate. Thanks, Arun