]> git.ipfire.org Git - thirdparty/openssl.git/commit - crypto/x509/v3_purp.c
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Tue, 22 Sep 2020 06:36:22 +0000 (08:36 +0200)
committerDr. David von Oheimb <David.von.Oheimb@siemens.com>
Sat, 26 Sep 2020 12:03:44 +0000 (14:03 +0200)
commit4ff993d7912516a2fd1d5c1e97a6f26a4644c1c6
treeac313e70bd5b7fef2dc7761ff80aa90c83c0a416
parentcf61b97d5fb9208ac254e999d86b1cf40c12b442
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()

Fixes #7761

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12947)
crypto/ocsp/ocsp_vfy.c
crypto/x509/v3_purp.c
doc/man3/OCSP_resp_find_status.pod
test/certs/ee-cert-crit-unknown-ext.pem [new file with mode: 0644]
test/certs/ee-cert-noncrit-unknown-ext.pem [new file with mode: 0644]
test/certs/ee-cert-ocsp-nocheck.pem [new file with mode: 0644]
test/certs/setup.sh
test/recipes/25-test_verify.t