diff --git a/testssl.sh b/testssl.sh index c201485..0a92080 100755 --- a/testssl.sh +++ b/testssl.sh @@ -1481,7 +1481,7 @@ check_revocation_crl() { return 1 fi cat $TEMPDIR/intermediatecerts.pem "${tmpfile%%.crl}.pem" >$TEMPDIR/${NODE}-${NODEIP}-CRL-chain.pem - openssl verify -crl_check -CAfile $TEMPDIR/${NODE}-${NODEIP}-CRL-chain.pem $TEMPDIR/host_certificate.pem &>$ERRFILE + $OPENSSL verify -crl_check -CAfile $TEMPDIR/${NODE}-${NODEIP}-CRL-chain.pem $TEMPDIR/host_certificate.pem &>$ERRFILE if [[ $? -eq 0 ]]; then out ", " pr_svrty_good "not revoked"