diff -r -c curl-7.24.0-20120103/docs/examples/curlx.c curl-7.24.0-20120103ps/docs/examples/curlx.c
*** curl-7.24.0-20120103/docs/examples/curlx.c	2010-03-22 13:27:06.000000000 +0100
--- curl-7.24.0-20120103ps/docs/examples/curlx.c	2012-01-04 19:14:15.464607863 +0100
***************
*** 239,246 ****
    SSL_CTX_set_cipher_list(ctx,"RC4-MD5");
    SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
  
!   X509_STORE_add_cert(ctx->cert_store,sk_X509_value(p->ca,
!                                                     sk_X509_num(p->ca)-1));
  
    SSL_CTX_set_verify_depth(ctx,2);
  
--- 239,245 ----
    SSL_CTX_set_cipher_list(ctx,"RC4-MD5");
    SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
  
!   X509_STORE_add_cert(SSL_CTX_get_cert_store(ctx), sk_X509_value(p->ca, sk_X509_num(p->ca)-1));
  
    SSL_CTX_set_verify_depth(ctx,2);
  
diff -r -c curl-7.24.0-20120103/lib/ssluse.c curl-7.24.0-20120103ps/lib/ssluse.c
*** curl-7.24.0-20120103/lib/ssluse.c	2011-12-07 04:00:07.000000000 +0100
--- curl-7.24.0-20120103ps/lib/ssluse.c	2012-01-04 19:13:35.585217693 +0100
***************
*** 1636,1642 ****
    if(data->set.str[STRING_SSL_CRLFILE]) {
      /* tell SSL where to find CRL file that is used to check certificate
       * revocation */
!     lookup=X509_STORE_add_lookup(connssl->ctx->cert_store,X509_LOOKUP_file());
      if(!lookup ||
         (!X509_load_crl_file(lookup,data->set.str[STRING_SSL_CRLFILE],
                              X509_FILETYPE_PEM)) ) {
--- 1636,1642 ----
    if(data->set.str[STRING_SSL_CRLFILE]) {
      /* tell SSL where to find CRL file that is used to check certificate
       * revocation */
!     lookup=X509_STORE_add_lookup(SSL_CTX_get_cert_store(connssl->ctx),X509_LOOKUP_file());
      if(!lookup ||
         (!X509_load_crl_file(lookup,data->set.str[STRING_SSL_CRLFILE],
                              X509_FILETYPE_PEM)) ) {
***************
*** 1647,1653 ****
      else {
        /* Everything is fine. */
        infof(data, "successfully load CRL file:\n");
!       X509_STORE_set_flags(connssl->ctx->cert_store,
                             X509_V_FLAG_CRL_CHECK|X509_V_FLAG_CRL_CHECK_ALL);
      }
      infof(data,
--- 1647,1653 ----
      else {
        /* Everything is fine. */
        infof(data, "successfully load CRL file:\n");
!       X509_STORE_set_flags(SSL_CTX_get_cert_store(connssl->ctx),
                             X509_V_FLAG_CRL_CHECK|X509_V_FLAG_CRL_CHECK_ALL);
      }
      infof(data,