On Tue, Jul 1, 2008 at 12:26 PM, Henrik Nordstrom
<[EMAIL PROTECTED]> wrote:
> OpenSSL also supports a directory with multiple CRLs, hashed by the
> issuing CN, and dynamic updates.

Is the availability of files like "<hash>.r0" in the capath=<dir>
enough to turn CRL processing on, or is the VERIFY_CRL or
VERIFY_CRL_ALL option to sslflags= enough?

--
Alex.

Reply via email to