From: Ruediger Pluem <rpluem@apache.org>
Date: Mon, 12 Jun 2017 12:48:30 +0000 (+0000)
Subject: * Mark OCSP_RESPONSE_STATUS_TRYLATER as error response
X-Git-Tag: 2.5.0-alpha~379
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3bd26f8c6b3ed892e0e27747bb5fce1db360ffc1;p=thirdparty%2Fapache%2Fhttpd.git

* Mark OCSP_RESPONSE_STATUS_TRYLATER as error response

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1798455 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/modules/ssl/ssl_util_stapling.c b/modules/ssl/ssl_util_stapling.c
index c3e2cfa657c..1148d90082b 100644
--- a/modules/ssl/ssl_util_stapling.c
+++ b/modules/ssl/ssl_util_stapling.c
@@ -511,6 +511,7 @@ static BOOL stapling_renew_response(server_rec *s, modssl_ctx_t *mctx, SSL *ssl,
                      "stapling_renew_response: responder error");
         if (mctx->stapling_fake_trylater) {
             *prsp = OCSP_response_create(OCSP_RESPONSE_STATUS_TRYLATER, NULL);
+            *pok = FALSE;
         }
         else {
             goto done;