I already asked for comments on inclusion of OpenSSL CRL support in
ext/openssl some time ago (I had a independend extension at this point).
As I continued working on it I realized that making this an independend
extension makes me to reinvent/reimplement the wheel and makes it
impossible to have ext/openssl and the CRL support to integrate nicely,
so I wrote a patch to include it in ext/openssl.
In fact, having Marc Delling's PKCS#12 patch and mine applied makes it
possible to write basic but real PKI-CA applications in PHP, so I think
it would be nice to have this.
I know that there are not that many people who need this but I think
this is true for nearly the whole openssl extension except for the
stream wrapper. (maybe we should consider splitting it up?)
You find a patch (hopefully I got your conding standards right ;))
attached, but I should take careful review because this actually is my
first work on PHP extensions and I'm also not used to writing C code.
I can/will provide a test (what kind of tests should I supply?) and
documentation when needed.