On Thu, Jan 15, 2004, Philip Hazel wrote:
> I will wishlist a research item to try to find out what the libraries
> offer, unless somebody tells me beforehand.
Taken from sendmail 8.13 (available as PreAlpha):
# if OPENSSL_VERSION_NUMBER > 0x00907000L
BIO *crl_file;
X509_CRL *crl;
X509_STORE *store;
if (CRLFile != NULL)
{
/* get a pointer to the current certificate validation store */
store = SSL_CTX_get_cert_store(*ctx); /* does not fail */
crl_file = BIO_new(BIO_s_file_internal());
if (crl_file != NULL)
{
if (BIO_read_filename(crl_file, CRLFile) != NULL)
{
crl = PEM_read_bio_X509_CRL(crl_file, NULL,
NULL, NULL);
BIO_free(crl_file);
X509_STORE_add_crl(store, crl);
X509_CRL_free(crl);
X509_STORE_set_flags(store,
X509_V_FLAG_CRL_CHECK|X509_V_FLAG_CRL_CHECK_ALL);
}
else
{
/* complain ... */
/* avoid memory leaks */
BIO_free(crl_file);
return false;
}
}
else /* complain ... */
}
# endif /* OPENSSL_VERSION_NUMBER > 0x00907000L */
