On Mon, Aug 07, 2017 at 11:26:33AM -0500, Sam Voss wrote: > Add the ability to ignore time-based errors from openssl by specifying a > new configuration parameter, "check_crl_strict". Thanks, applied with cleanup and fixes. > diff --git a/src/crypto/tls_openssl.c b/src/crypto/tls_openssl.c > @@ -188,6 +188,7 @@ struct tls_context { > void *cb_ctx; > int cert_in_cb; > char *ocsp_stapling_response; > + int check_crl_strict; In particular, this struct tls_context is not appropriate place for this type of configuration parameters, so I moved it into struct tls_data. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap