Great. Will this checking be invoked automatically as part of a Verify call
(as it is with OpenSSL) ?

If not, when and how is it called ?

Thanks,
Ed  

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Dmitry Belyavsky
Sent: December 20, 2005 9:52 AM
To: Aleksey Sanin
Cc: [EMAIL PROTECTED]; 'XMLSec'
Subject: [Bulk] Re: [xmlsec] xmlSecMSCryptoX509StoreConstructCertsChain

Greetings!

> On Mon, 19 Dec 2005, Aleksey Sanin wrote:
>
> > > Then does a call to xmlSecMSCryptoX509StoreConstructCertsChain do 
> > > both a cert chain check and a revocation check ?
> > Take a look at the code. Yes, it does everything including all the 
> > checks (e.g. verification time).
> >
> > >
> > > Does this work now, or will it work only after Dmitry's patch ?
> > >
> > Unrelated to Dmirty's patch. His patch provides a shortcut that does 
> > not call this function.
>
> I've found out I should improve the patch concerning to the revocation 
> status of the chain. So I'll provide the improved version tomorrow.

The improved version is attached.

--
SY, Dmitry Belyavsky (ICQ UIN 11116575)


_______________________________________________
xmlsec mailing list
[email protected]
http://www.aleksey.com/mailman/listinfo/xmlsec

Reply via email to