secgsi: fix for issue #465 (Absent CRL is not an error)

xrootd · Feb 21, 2017 · 106f019 · 106f019
1 parent c725bfc
commit 106f019
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/src/XrdSecgsi/XrdSecProtocolgsi.cc b/src/XrdSecgsi/XrdSecProtocolgsi.cc
@@ -4406,8 +4406,12 @@ int XrdSecProtocolgsi::GetCA(const char *cahash,
                   // Good CA
                   DEBUG("CRL successfully loaded");
                } else {
-                  ok = 0;
-                  NOTIFY("CRL is missing or expired (CRLCheck: "<<CRLCheck<<")");
+                  String em = "ignoring";
+                  if (CRLCheck >= 2) {
+                     ok = 0;
+                     em = "failing";
+                  }
+                  NOTIFY("CRL is missing or expired: "<<em<<" (CRLCheck: "<<CRLCheck<<")");
                }
             }
          }