]> git.ipfire.org Git - thirdparty/gnutls.git/commit
ocsp: gnutls_ocsp_resp_verify_direct will skip additional checks for certificates...
authorNikos Mavrogiannopoulos <nmav@gnutls.org>
Wed, 23 Mar 2016 22:00:53 +0000 (23:00 +0100)
committerNikos Mavrogiannopoulos <nmav@gnutls.org>
Wed, 23 Mar 2016 22:01:37 +0000 (23:01 +0100)
commited53e44f7cedd04bf3e21744fa1971b5620701ac
tree2971151207d7bab57a6b86d1c0e7a0d4f18b322a
parente95d7d1aca6f5e078f354c22b85d961ded8e16a1
ocsp: gnutls_ocsp_resp_verify_direct will skip additional checks for certificates matching issuer

That eliminates issue with ocsptool rejecting OCSP responses signed
by the same CA that signed the certificate. Reported by Thomas Klute.
lib/x509/ocsp.c