It is understood that if CRL check is set but CRL file is not included, openSSL will report ERR(3).
What happens, if we have a 3-tier CAs and the CRL from the middle tier is not included. Will openSSL report error, with the setting of X509_V_FLAG_CRL_CHECK_ALL?
- rosect190