ctx->error = X509_V_ERR_CERT_REVOKED; ok = ctx->verify_cb(0, ctx); return ok;
if(idx >= 0) { ctx->error = X509_V_ERR_CERT_REVOKED; ok = ctx->verify_cb(0, ctx); if (!ok) return 0; }  if (ctx->flags & X509_V_FLAG_IGNORE_CRITICAL) return 1;    exts = crl->crl->extensions;  for (idx = 0; idx < sk_X509_EXTENSION_num(exts); idx++) { ext = sk_X509_EXTENSION_value(exts, idx); if (ext->critical > 0) { ctx->error = X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION; ok = ctx->verify_cb(0, ctx); if(!ok) return 0; break; } } return 1;
static int cert_crl(X509_STORE_CTX *ctx, X509_CRL *crl, X509 *x)	{	int idx, ok;	X509_REVOKED rtmp;	/* Look for serial number of certificate in CRL */	rtmp.serialNumber = X509_get_serialNumber(x);	idx = sk_X509_REVOKED_find(crl->crl->revoked, &rtmp);	/* Not found: OK */	if(idx == -1) return 1;	/* Otherwise revoked: want something cleverer than	 * this to handle entry extensions in V2 CRLs.	 */	ctx->error = X509_V_ERR_CERT_REVOKED;	ok = ctx->verify_cb(0, ctx);	return ok;	}