PATCH TLS doesn't check CRLs

[brong]

From: stacy@millions.ca
Bugzilla-Id: 3229
Version: 2.3.x
Owner: Ken Murchison

[brong]

Attachment-Id: 1282
From:
Type: application/octet-stream
File: patch-crl

patch to implement crl checking

[ajaysusarla]

@ksmurchison Do you think this bug is still relevant? If yes, how can I test this in Cyrus?

[ksmurchison]

I don't know for sure if its still relevant, but I expect that it might be. I'm neither a TLS nor a security expert. It might be worth doing a little OpenSSL research on certificate revocation lists.

I do know that the patch is flawed in that it should be adding the new option to lib/imapoptions and not the derived imapopts.[ch] files

[ajaysusarla]

@ksmurchison Thank you! I shall dig into this. Cheers!