Use newest CRL.
authorDr. Stephen Henson <steve@openssl.org>
Fri, 22 Jul 2016 12:43:41 +0000 (13:43 +0100)
committerDr. Stephen Henson <steve@openssl.org>
Fri, 22 Jul 2016 15:13:56 +0000 (16:13 +0100)
commit626aa24849be549b7ef4f049d8427989940c8a37
treef6c08208fd4b735082ad8e8d39a92f0d6f410a00
parent31a7d80d0ddb9dddde45c112316057a83e743c15
Use newest CRL.

If two CRLs are equivalent then use the one with a later lastUpdate field:
this will result in the newest CRL available being used.

RT#4615

Reviewed-by: Rich Salz <rsalz@openssl.org>
crypto/x509/x509_vfy.c