From 5a89fd8a245c969d6774e9cf6ab650127555b4c7 Mon Sep 17 00:00:00 2001 From: olszomal Date: Wed, 7 Jan 2026 11:23:30 +0100 Subject: [PATCH] Print current CRL during certificate verification --- osslsigncode.c | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/osslsigncode.c b/osslsigncode.c index ef7b376..c3d83ff 100644 --- a/osslsigncode.c +++ b/osslsigncode.c @@ -1901,11 +1901,22 @@ static int verify_ca_callback(int ok, X509_STORE_CTX *ctx) static int verify_crl_callback(int ok, X509_STORE_CTX *ctx) { + X509_CRL *crl; int error = X509_STORE_CTX_get_error(ctx); int depth = X509_STORE_CTX_get_error_depth(ctx); - X509 *current_cert = X509_STORE_CTX_get_current_cert(ctx); + print_cert(current_cert, depth); + + crl = X509_STORE_CTX_get0_current_crl(ctx); + if (crl) { + BIO *bio = BIO_new_fp(stdout, BIO_NOCLOSE); + + X509_CRL_print(bio, crl); + BIO_free(bio); + printf("\n"); + } + if (!ok) { if (trusted_cert(current_cert, error)) { return 1;