return 1;
/* See if we have any critical CRL extensions: since we
- * currently don't handle any CRL extensions the CRL must be
- * rejected.
+ * currently only handle IDP the CRL must be rejected if any others
+ * are present.
* This code accesses the X509_CRL structure directly: applications
* shouldn't do this.
*/