CRLCheck = 1 is supposed to implement the standard behaviour, i.e. "use if present". This means that a missing CRL should nor be considers an error. But it also means that a present but expired CRL should trigger an error. The code still treats a missing and an expired CRL the same. Now it accept both instead of rejecting both as it did before, but it should accept a missing CRL while rejecting an expired one. -- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/pull/467#issuecomment-282394106 ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1