[Bulk] Re: [xmlsec] xmlSecMSCryptoX509StoreConstructCertsChain
ed.shallow at rogers.com
Tue Dec 20 06:57:18 PST 2005
Great. Will this checking be invoked automatically as part of a Verify call
(as it is with OpenSSL) ?
If not, when and how is it called ?
From: xmlsec-bounces at aleksey.com [mailto:xmlsec-bounces at aleksey.com] On
Behalf Of Dmitry Belyavsky
Sent: December 20, 2005 9:52 AM
To: Aleksey Sanin
Cc: ed.shallow at rogers.com; 'XMLSec'
Subject: [Bulk] Re: [xmlsec] xmlSecMSCryptoX509StoreConstructCertsChain
> On Mon, 19 Dec 2005, Aleksey Sanin wrote:
> > > Then does a call to xmlSecMSCryptoX509StoreConstructCertsChain do
> > > both a cert chain check and a revocation check ?
> > Take a look at the code. Yes, it does everything including all the
> > checks (e.g. verification time).
> > >
> > > Does this work now, or will it work only after Dmitry's patch ?
> > >
> > Unrelated to Dmirty's patch. His patch provides a shortcut that does
> > not call this function.
> I've found out I should improve the patch concerning to the revocation
> status of the chain. So I'll provide the improved version tomorrow.
The improved version is attached.
SY, Dmitry Belyavsky (ICQ UIN 11116575)
More information about the xmlsec