x509_crl regress: enable the failing test and mark as XFAIL

2 files changed, 4 insertions, 4 deletions

diff --git a/src/regress/lib/libcrypto/x509/Makefile b/src/regress/lib/libcrypto/x509/Makefile
index 8e043007d0..a127e264c9 100644
--- a/src/regress/lib/libcrypto/x509/Makefile
+++ b/src/regress/lib/libcrypto/x509/Makefile
@@ -1,4 +1,4 @@
-#       $OpenBSD: Makefile,v 1.27 2026/06/23 08:32:55 tb Exp $
+#       $OpenBSD: Makefile,v 1.28 2026/06/26 05:59:11 tb Exp $
 
 PROGS = constraints verify x509attribute x509req_ext callback
 PROGS += expirecallback callbackfailures x509_asn1 x509_extensions_test
@@ -9,6 +9,8 @@ DPADD =	${LIBCRYPTO}
 LDADD_constraints = ${CRYPTO_INT}
 LDADD_verify = ${CRYPTO_INT}
 
+REGRESS_EXPECTED_FAILURES = run-regress-x509_crl
+
 WARNINGS =      Yes
 CFLAGS +=       -DLIBRESSL_INTERNAL -Wall -Werror
 CFLAGS +=       -I${.CURDIR}/../../../../lib/libcrypto/x509
diff --git a/src/regress/lib/libcrypto/x509/x509_crl.c b/src/regress/lib/libcrypto/x509/x509_crl.c
index b63376e5b5..941b865263 100644
--- a/src/regress/lib/libcrypto/x509/x509_crl.c
+++ b/src/regress/lib/libcrypto/x509/x509_crl.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: x509_crl.c,v 1.1 2026/06/23 08:24:49 tb Exp $ */
+/*      $OpenBSD: x509_crl.c,v 1.2 2026/06/26 05:59:11 tb Exp $ */
 
 /*
  * Copyright (c) 2015, Google Inc.
@@ -305,13 +305,11 @@ main(void)
                 goto err;
         }
 
-#if 0
         if (verify(leaf, root, make_CRL_stack(basic_crl, revoked_crl),
             X509_V_FLAG_CRL_CHECK) != X509_V_ERR_CERT_REVOKED) {
                 fprintf(stderr, "Revoked CRL wasn't checked.\n");
                 goto err;
         }
-#endif
 
         if (verify(leaf, root, NULL,
             X509_V_FLAG_CRL_CHECK) != X509_V_ERR_UNABLE_TO_GET_CRL) {