Does anyone know if the issues related to CRL check are resolved? I tried using the Apple API specifying the following policy :
SecPolicyCreateRevocation(kSecRevocationCRLMethod|kSecRevocationRequirePositiveResponse)
but always get kSecTrustResultRecoverableTrustFailure response. Any document for its usage would be helpful.