GNOME Bugzilla – Bug 547881
Missing CRL support
Last modified: 2010-11-09 16:28:00 UTC
I use libsoup 2.2 and 2.4 in libsyncml. I need static CRL support to get a minimum secure environment. Actually I see no way how to configure a static file CRL or a CDP. A property SOUP_SESSION_SSL_CRL_FILE like the known SOUP_SESSION_SSL_CA_FILE would be nice. If libsoup supports dynamic CRL allocation via CDPs then simply delete this feature request. I don't know if GnuTLS determines CDPs dynamically from certificates.
This should be possible in 2.32/3.0 when we port to the new GIO TLS APIs (bug 588189). *** This bug has been marked as a duplicate of bug 634425 ***