From 7f32382493129d1a8d5b985603ff92ec5ca341e0 Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Fri, 15 Sep 2006 18:24:21 +0000 Subject: Don't need verbose crl checking svn path=/scripts/rcynic-prototype.pl; revision=276 --- scripts/rcynic-prototype.pl | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'scripts/rcynic-prototype.pl') diff --git a/scripts/rcynic-prototype.pl b/scripts/rcynic-prototype.pl index 2b44bf6c..c841205d 100644 --- a/scripts/rcynic-prototype.pl +++ b/scripts/rcynic-prototype.pl @@ -227,7 +227,8 @@ sub check_crl { # Check signature chain on a CRL, install CRL if all is well next unless (-f "$source/$file"); logmsg("Checking saved old CRL $uri") if ($source eq $old_authenticated_tree); - my @result = openssl_pipe("crl", "-CAfile", $cafile, "-in", "$source/$file", "-inform", + my @result = openssl_pipe("crl", "-CAfile", $cafile, "-noout", + "-in", "$source/$file", "-inform", ($source eq $old_authenticated_tree ? "PEM" : "DER")); if (grep(/verify OK/, @result)) { if ($source eq $old_authenticated_tree) { -- cgit v1.2.3