(smime-crl-check): New.

(smime-verify-region): Use it.  From Arne Jørgensen
<arne@arnested.dk> in <87llpk9v5q.fsf@seamus.arnested.dk> (tiny
change).

diff --git a/lisp/ChangeLog b/lisp/ChangeLog
index 00a76ac..57634bb 100644 (file)
--- a/lisp/ChangeLog
+++ b/lisp/ChangeLog
@@ -1,3 +1,10 @@
+2003-12-30  Simon Josefsson  <jas@extundo.com>
+
+       * smime.el (smime-crl-check): New.
+       (smime-verify-region): Use it.  From Arne J\e,Ax\e(Brgensen
+       <arne@arnested.dk> in <87llpk9v5q.fsf@seamus.arnested.dk> (tiny
+       change).
+
 2003-12-30  Reiner Steib  <Reiner.Steib@gmx.de>
 
        * gnus-score.el (gnus-score-edit-file-at-point): Consider the

diff --git a/lisp/smime.el b/lisp/smime.el
index b14e24a..4a5a900 100644 (file)
--- a/lisp/smime.el
+++ b/lisp/smime.el
@@ -184,6 +184,13 @@ and the files themself should be in PEM format."
                 (const :tag "RC2 128 bits" "-rc2-128"))
   :group 'smime)
 
+(defcustom smime-crl-check nil
+  "*Check revocation status of signers certificate using CRLs."
+  :type '(choice (const :tag "No check" nil)
+                (const :tag "Check certificate" "-crl_check")
+                (const :tag "Check certificate chain" "-crl_check_all"))
+  :group 'smime)
+
 (defcustom smime-dns-server nil
   "*DNS server to query certificates from.
 If nil, use system defaults."
@@ -348,6 +355,8 @@ Any details (stdout and stderr) are left in the buffer specified by
                               (expand-file-name smime-CA-directory))))))
     (unless CAs
       (error "No CA configured"))
+    (if smime-crl-check
+       (add-to-list 'CAs smime-crl-check))
     (if (apply 'smime-call-openssl-region b e (list smime-details-buffer t)
               "smime" "-verify" "-out" "/dev/null" CAs)
        t