Do not list client exports for revoked certificates.

[skrude61]

Exporting clients for revoked certificates makes no sense.

[jim-p]

It works fine for SSL/TLS but doesn't work for SSL/TLS + User Auth servers. For that you'll need a test on the block just above this one, for example:

<?php       if (!$server['crlref'] || !is_cert_revoked($config['system']['user'][$user['uindex']]['cert'][$user['cindex']], $server['crlref'])) { ?>
servers[<?=$sindex?>][1][<?=$uindex?>] = new Array();
servers[<?=$sindex?>][1][<?=$uindex?>][0] = '<?=$user['uindex']?>';
servers[<?=$sindex?>][1][<?=$uindex?>][1] = '<?=$user['cindex']?>';
servers[<?=$sindex?>][1][<?=$uindex?>][2] = '<?=$user['name']?>';
servers[<?=$sindex?>][1][<?=$uindex?>][3] = '<?=str_replace("'", "\\'", $user['certname'])?>';
<?      }

[skrude61]

That's not quite true. It works for SSL/TLS + User Auth, but only for non-local user databases.
For local database your patch is not working if $config['system']['user'][$user['uindex']]['cert'][$user['cindex']] is a certref, not a cert, so I had to modify it a little bit.

[jim-p]

This looks OK now, can you also bump the version in the Makefile so the package will get rebuilt?

[skrude61]

Done.

[rbgarga]

@skreuzer can you please rebase your fork? This patch cannot be applied cleanly on current repo

[skreuzer]

@skreuzer can you please rebase your fork? This patch cannot be applied cleanly on current repo

was this comment meant for someone else?

[rbgarga]

@skreuzer yes, sorry!

[rbgarga]

@skrude61 can you please rebase your fork? This patch cannot be applied cleanly on current repo

[skrude61]

@rbgarga Done.