From: Simon Josefsson Date: Tue, 30 Dec 2003 21:10:19 +0000 (+0000) Subject: (smime-crl-check): New. X-Git-Url: http://cgit.sxemacs.org/?a=commitdiff_plain;h=b7a525d6f1890ae28243b9a3ae12d16190917aa8;p=gnus (smime-crl-check): New. (smime-verify-region): Use it. From Arne Jørgensen in <87llpk9v5q.fsf@seamus.arnested.dk> (tiny change). --- diff --git a/lisp/ChangeLog b/lisp/ChangeLog index 00a76ac1a..57634bbba 100644 --- a/lisp/ChangeLog +++ b/lisp/ChangeLog @@ -1,3 +1,10 @@ +2003-12-30 Simon Josefsson + + * smime.el (smime-crl-check): New. + (smime-verify-region): Use it. From Arne J,Ax(Brgensen + in <87llpk9v5q.fsf@seamus.arnested.dk> (tiny + change). + 2003-12-30 Reiner Steib * gnus-score.el (gnus-score-edit-file-at-point): Consider the diff --git a/lisp/smime.el b/lisp/smime.el index b14e24a29..4a5a90060 100644 --- a/lisp/smime.el +++ b/lisp/smime.el @@ -184,6 +184,13 @@ and the files themself should be in PEM format." (const :tag "RC2 128 bits" "-rc2-128")) :group 'smime) +(defcustom smime-crl-check nil + "*Check revocation status of signers certificate using CRLs." + :type '(choice (const :tag "No check" nil) + (const :tag "Check certificate" "-crl_check") + (const :tag "Check certificate chain" "-crl_check_all")) + :group 'smime) + (defcustom smime-dns-server nil "*DNS server to query certificates from. If nil, use system defaults." @@ -348,6 +355,8 @@ Any details (stdout and stderr) are left in the buffer specified by (expand-file-name smime-CA-directory)))))) (unless CAs (error "No CA configured")) + (if smime-crl-check + (add-to-list 'CAs smime-crl-check)) (if (apply 'smime-call-openssl-region b e (list smime-details-buffer t) "smime" "-verify" "-out" "/dev/null" CAs) t