Bugs item #2892587, was opened at 2009-11-05 14:19
Message generated for change (Tracker Item Submitted) made by koresh
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2892587&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: libcurl
Group: wrong behaviour
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Johan van Selst (koresh)
Assigned to: Daniel Stenberg (bagder)
Summary: [patch] allow multiple CRLs in one file

Initial Comment:
The CRL file set with curl_easy_setopt() may only contain one CRL. However, often it is convenient to store multiple CRLs in a single file when using a PKI (one for the intermediate certificate, one for the root certificate). SSL will even give an error if some intermediate CAs have a CRL while others do not.

libcurl uses X509_load_crl_file() which can handle multiple CRLs in one file. This function returns the number of CRLs loaded. However libcurl will give an error when the return value != 1. It should only give an error when 0 CRLs could be loaded; not when 2 or 3 were loaded successfully by OpenSSL.

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2892587&group_id=976
Received on 2009-11-05