[openssl-dev] [openssl.org #3940] Missing CRL checks in cms/smime cmdline utilities

[Rich Salz via RT]

For now we just added a comment to master, 1.0.2, 1.0.1 in the cms.pod and
smime.pod files:

Note that no revocation check is done for the recipient cert, so if that
key has been compromised, others may be able to decrypt the text.

-- 
Ticket here: http://rt.openssl.org/Ticket/Display.html?id=3940
Please log in as guest with password guest if prompted