From 106f019609907acb6fa7ac22bac162e29072bc5b Mon Sep 17 00:00:00 2001
From: Gerardo Ganis <Gerardo.Ganis@cern.ch>
Date: Mon, 20 Feb 2017 15:56:56 +0100
Subject: [PATCH] secgsi: fix for issue #465 (Absent CRL is not an error)

---
 src/XrdSecgsi/XrdSecProtocolgsi.cc | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/XrdSecgsi/XrdSecProtocolgsi.cc b/src/XrdSecgsi/XrdSecProtocolgsi.cc
index 376613e0058..75d18b3f198 100644
--- a/src/XrdSecgsi/XrdSecProtocolgsi.cc
+++ b/src/XrdSecgsi/XrdSecProtocolgsi.cc
@@ -4406,8 +4406,12 @@ int XrdSecProtocolgsi::GetCA(const char *cahash,
                   // Good CA
                   DEBUG("CRL successfully loaded");
                } else {
-                  ok = 0;
-                  NOTIFY("CRL is missing or expired (CRLCheck: "<<CRLCheck<<")");
+                  String em = "ignoring";
+                  if (CRLCheck >= 2) {
+                     ok = 0;
+                     em = "failing";
+                  }
+                  NOTIFY("CRL is missing or expired: "<<em<<" (CRLCheck: "<<CRLCheck<<")");
                }
             }
          }