Add support for providing CRLs to libtls - once a CRL is provided we
authorjsing <jsing@openbsd.org>
Thu, 6 Jul 2017 17:12:22 +0000 (17:12 +0000)
committerjsing <jsing@openbsd.org>
Thu, 6 Jul 2017 17:12:22 +0000 (17:12 +0000)
commit80bc881d80f6b7dd8f1258dcf7b2751cdebb3611
treeed251e4dc365ac3c90fe70ecce69a8c3368d41fb
parent5537c23b4dcfcc114999687fe9a3cd3ee9788668
Add support for providing CRLs to libtls - once a CRL is provided we
enable CRL checking for the full certificate chain.

Based on a diff from Jack Burton <jack at saosce dot com dot au>, thanks!

Discussed with beck@
lib/libtls/Symbols.list
lib/libtls/tls.c
lib/libtls/tls.h
lib/libtls/tls_config.c
lib/libtls/tls_internal.h