missing CRL nextUpdate field - Bug in mod_ssl (seg fault)

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C29073.C9981020
Content-Type: text/plain;
charset="windows-1255"

Hi,

When using a CRL without the nextUpdate field (you can create such CRL in
iPlanet), I get a segmentation fault (using mod_ssl-2.8.8-1.3.24).

This occurs in the call:

i = X509_cmp_current_time(X509_CRL_get_nextUpdate(crl));

since X509_CRL_get_nextUpdate(crl) returns NULL in this situation.

------_=_NextPart_001_01C29073.C9981020
Content-Type: text/html;
charset="windows-1255"