X509_V_ERR_CRL_SIGNATURE_FAILURE
case X509_V_ERR_CRL_SIGNATURE_FAILURE:
if (X509_CRL_verify(crl, ikey) <= 0 && !verify_cb_crl(ctx, X509_V_ERR_CRL_SIGNATURE_FAILURE))
{ X509_V_ERR_CRL_SIGNATURE_FAILURE, SSL_AD_DECRYPT_ERROR },