I need to determine that a certificate is valid and has not been revoked.
No matter what settings I make in the Keychain preferences, I never see any
attempt by the Mac to verify that the certificate has not been revoked. I
am tracing network activity, and expect the Mac to use OCSP or CRL to check
the certificate.
In my own software, I am using SecTrustEvaluate to check the certificate.
This function always succeeds with kSecTrustResultProceed.
Is a CRL cached? Is there a way to remove the cached CRL to force the Mac
to retrieve one?
Paul Nelson
Thursby Software Systems, Inc.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Apple-cdsa mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/apple-cdsa/email@hidden
This email sent to email@hidden
