&& X509_get_ext_by_NID(signer, NID_id_pkix_OCSP_noCheck, -1) >= 0)
/*
* Locally disable revocation status checking for OCSP responder cert.
- * Done here for CRLs; TODO should be done also for OCSP-based checks.
+ * Done here for CRLs; should be done also for OCSP-based checks.
*/
X509_VERIFY_PARAM_clear_flags(vp, X509_V_FLAG_CRL_CHECK);
X509_STORE_CTX_set_purpose(ctx, X509_PURPOSE_OCSP_HELPER);
X509_STORE_CTX_set_trust(ctx, X509_TRUST_OCSP_REQUEST);
- /* TODO: why is X509_TRUST_OCSP_REQUEST set? Seems to get ignored. */
ret = X509_verify_cert(ctx);
if (ret <= 0) {