diff options
author | Rob Austein <sra@hactrn.net> | 2006-09-15 18:24:21 +0000 |
---|---|---|
committer | Rob Austein <sra@hactrn.net> | 2006-09-15 18:24:21 +0000 |
commit | 7f32382493129d1a8d5b985603ff92ec5ca341e0 (patch) | |
tree | dbea3c33ae4898fd60f1aae885282b55e4628a00 | |
parent | 91c87348b3bf6b9352d07d7518ffa08d545368ed (diff) |
Don't need verbose crl checking
svn path=/scripts/rcynic-prototype.pl; revision=276
-rw-r--r-- | scripts/rcynic-prototype.pl | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/scripts/rcynic-prototype.pl b/scripts/rcynic-prototype.pl index 2b44bf6c..c841205d 100644 --- a/scripts/rcynic-prototype.pl +++ b/scripts/rcynic-prototype.pl @@ -227,7 +227,8 @@ sub check_crl { # Check signature chain on a CRL, install CRL if all is well next unless (-f "$source/$file"); logmsg("Checking saved old CRL $uri") if ($source eq $old_authenticated_tree); - my @result = openssl_pipe("crl", "-CAfile", $cafile, "-in", "$source/$file", "-inform", + my @result = openssl_pipe("crl", "-CAfile", $cafile, "-noout", + "-in", "$source/$file", "-inform", ($source eq $old_authenticated_tree ? "PEM" : "DER")); if (grep(/verify OK/, @result)) { if ($source eq $old_authenticated_tree) { |