[PATCH 0/3] Add CRL checking to server and client (v2)

[Rik Theys <rik.theys@gmail.com>]

These patches add CRL checking to the TLS client and server code.

It introduces an x509.crl configuration option that specifies the
location of a CRL in PEM format.

The CRL (certificate revocation list) can be used by an administrator
to block access to certificates that should no longer be trusted
for some reason.

See https://github.com/oracle/ktls-utils/issues/103

The last two patches implement the suggestion from Long Xin.

Rik Theys (5):
  Add server-side CRL checking
  Add client-side CRL checking
  Add x509.crl option to man page.
  Move server-side CRL code to common function
  Move client-side CRL code to common function

 src/tlshd/client.c       | 68 ++++++++++++++++++++++++----------------
 src/tlshd/config.c       | 66 ++++++++++++++++++++++++++++++++++++++
 src/tlshd/server.c       | 63 ++++++++++++++++++++++++-------------
 src/tlshd/tlshd.conf.man |  9 +++++-
 src/tlshd/tlshd.h        |  2 ++
 5 files changed, 158 insertions(+), 50 deletions(-)

-- 
2.49.0