* ext/openssl/lib/openssl/ssl.rb (OpenSSL::SSL::SSLContext.build):

enable CRL checking on default cert store.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@14372 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
This commit is contained in:
gotoyuzo 2007-12-20 16:27:14 +00:00
parent c6920177f3
commit ec0340b4b6
2 changed files with 8 additions and 0 deletions

View file

@ -37,6 +37,9 @@ module OpenSSL
unless ctx.ca_file or ctx.ca_path or
ctx.cert_store or ctx.verify_callback
ctx.cert_store = OpenSSL::X509::Store.new
if defined?(OpenSSL::X509::V_FLAG_CRL_CHECK_ALL)
ctx.cert_store.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL
end
ctx.cert_store.set_default_paths
end
end