From 73d18a4f2b3d38d316d58fba24a3267634dbba54 Mon Sep 17 00:00:00 2001
From: tb <>
Date: Fri, 26 Jun 2026 05:59:11 +0000
Subject: x509_crl regress: enable the failing test and mark as XFAIL

---
 src/regress/lib/libcrypto/x509/Makefile   | 4 +++-
 src/regress/lib/libcrypto/x509/x509_crl.c | 4 +---
 2 files changed, 4 insertions(+), 4 deletions(-)

(limited to 'src')

diff --git a/src/regress/lib/libcrypto/x509/Makefile b/src/regress/lib/libcrypto/x509/Makefile
index 8e043007d0..a127e264c9 100644
--- a/src/regress/lib/libcrypto/x509/Makefile
+++ b/src/regress/lib/libcrypto/x509/Makefile
@@ -1,4 +1,4 @@
-#	$OpenBSD: Makefile,v 1.27 2026/06/23 08:32:55 tb Exp $
+#	$OpenBSD: Makefile,v 1.28 2026/06/26 05:59:11 tb Exp $
 
 PROGS =	constraints verify x509attribute x509req_ext callback
 PROGS += expirecallback callbackfailures x509_asn1 x509_extensions_test
@@ -9,6 +9,8 @@ DPADD =	${LIBCRYPTO}
 LDADD_constraints = ${CRYPTO_INT}
 LDADD_verify = ${CRYPTO_INT}
 
+REGRESS_EXPECTED_FAILURES = run-regress-x509_crl
+
 WARNINGS =	Yes
 CFLAGS +=	-DLIBRESSL_INTERNAL -Wall -Werror
 CFLAGS +=	-I${.CURDIR}/../../../../lib/libcrypto/x509
diff --git a/src/regress/lib/libcrypto/x509/x509_crl.c b/src/regress/lib/libcrypto/x509/x509_crl.c
index b63376e5b5..941b865263 100644
--- a/src/regress/lib/libcrypto/x509/x509_crl.c
+++ b/src/regress/lib/libcrypto/x509/x509_crl.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: x509_crl.c,v 1.1 2026/06/23 08:24:49 tb Exp $ */
+/*	$OpenBSD: x509_crl.c,v 1.2 2026/06/26 05:59:11 tb Exp $ */
 
 /*
  * Copyright (c) 2015, Google Inc.
@@ -305,13 +305,11 @@ main(void)
 		goto err;
 	}
 
-#if 0
 	if (verify(leaf, root, make_CRL_stack(basic_crl, revoked_crl),
 	    X509_V_FLAG_CRL_CHECK) != X509_V_ERR_CERT_REVOKED) {
 		fprintf(stderr, "Revoked CRL wasn't checked.\n");
 		goto err;
 	}
-#endif
 
 	if (verify(leaf, root, NULL,
 	    X509_V_FLAG_CRL_CHECK) != X509_V_ERR_UNABLE_TO_GET_CRL) {
-- 
cgit v1.2.3-55-g6feb