GOAHEAD LOADS THE CRL AND NEVER ENFORCES IT
GoAhead 6.1.1 closes 11 advisories, three of them critical. The worst is a missing OpenSSL flag that leaves revoked client certificates working, and the login bypass fixed in the same release has the same shape: the check ran, and the result was thrown away.