Add code to download CRLs based on CRLDP extension.

[thirdparty/openssl.git] / apps / verify.c

diff --git a/apps/verify.c b/apps/verify.c
index 8f897cf48563ff74fc4874d1db3266d55001ef08..bcca114efe4557675b6b4ed5c5b0cc483a5070ce 100644 (file)
--- a/apps/verify.c
+++ b/apps/verify.c
@@ -88,6 +88,7 @@ int MAIN(int argc, char **argv)
        X509_STORE *cert_ctx=NULL;
        X509_LOOKUP *lookup=NULL;
        X509_VERIFY_PARAM *vpm = NULL;
+       int crl_download = 0;
 #ifndef OPENSSL_NO_ENGINE
        char *engine=NULL;
 #endif
@@ -145,6 +146,8 @@ int MAIN(int argc, char **argv)
                                if (argc-- < 1) goto end;
                                crlfile= *(++argv);
                                }
+                       else if (strcmp(*argv,"-crl_download") == 0)
+                               crl_download = 1;
 #ifndef OPENSSL_NO_ENGINE
                        else if (strcmp(*argv,"-engine") == 0)
                                {
@@ -222,6 +225,9 @@ int MAIN(int argc, char **argv)
                        goto end;
                }
 
+       if (crl_download)
+               store_setup_crl_download(cert_ctx);
+
        if (argc < 1) check(cert_ctx, NULL, untrusted, trusted, crls, e);
        else
                for (i=0; i<argc; i++)