[openssl-users] CRL signature verification

[Salz, Rich]

➢   I was more talking about the parsing. Currently I have 40 LOC [1] to

Look at X509_get1_ocsp which is in crypto/x509v3/v3_utl.c  That’s in 1.0.2 and later

➢ > X509_CRL_verify.  And yes, looking through to find the serial# is what you have to do.
    
➢     That's 1.1-specific, correct?
    
Yes.