With openssl library, how do i check if the peer certificate is revoked or not. from what i googled:
- x509 cerfiticate contains set of crl distribution points, ie set of urls
- download the crl from these urls
- crl contains serial numbers of certificates that are revoked
- if the peer certificate serial number is there in the crl list, then it is revoked
what openssl apis do i use to accomplish this? Also, is this the right way of checking if the certificate is revoked or not?