Use newest CRL.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 22 Jul 2016 12:43:41 +0000 (13:43 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 22 Jul 2016 15:15:02 +0000 (16:15 +0100)
commit325da8231c8d441e6bb7f15d1a5a23ff63c842e5
treee015737293e61db078712059e6b63b3449f4ca7e
parent02f873c5410e8b96c6a55cc906b8f10cd84b0835
Use newest CRL.

If two CRLs are equivalent then use the one with a later lastUpdate field:
this will result in the newest CRL available being used.

RT#4615

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 626aa24849be549b7ef4f049d8427989940c8a37)
crypto/x509/x509_vfy.c