[Bulk] Re: [xmlsec] xmlSecMSCryptoX509StoreConstructCertsChain

[Edward Shallow]

Great. Will this checking be invoked automatically as part of a Verify call
(as it is with OpenSSL) ?

If not, when and how is it called ?

Thanks,
Ed  

-----Original Message-----
From: xmlsec-bounces at aleksey.com [mailto:xmlsec-bounces at aleksey.com] On
Behalf Of Dmitry Belyavsky
Sent: December 20, 2005 9:52 AM
To: Aleksey Sanin
Cc: ed.shallow at rogers.com; 'XMLSec'
Subject: [Bulk] Re: [xmlsec] xmlSecMSCryptoX509StoreConstructCertsChain

Greetings!

> On Mon, 19 Dec 2005, Aleksey Sanin wrote:
>
> > > Then does a call to xmlSecMSCryptoX509StoreConstructCertsChain do 
> > > both a cert chain check and a revocation check ?
> > Take a look at the code. Yes, it does everything including all the 
> > checks (e.g. verification time).
> >
> > >
> > > Does this work now, or will it work only after Dmitry's patch ?
> > >
> > Unrelated to Dmirty's patch. His patch provides a shortcut that does 
> > not call this function.
>
> I've found out I should improve the patch concerning to the revocation 
> status of the chain. So I'll provide the improved version tomorrow.

The improved version is attached.

--
SY, Dmitry Belyavsky (ICQ UIN 11116575)