gnutls-cli: Log all stapled OCSP responses when running with --verbose

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>

diff --git a/src/cli.c b/src/cli.c
index 26b6f74099c19bff20c99387e8baa3887cd93f32..f02f842b719f9294eb6e20b578fd130f62f5c50d 100644 (file)
--- a/src/cli.c
+++ b/src/cli.c
@@ -1158,15 +1158,24 @@ print_other_info(gnutls_session_t session)
 {
 #ifdef ENABLE_OCSP
        int ret;
+       unsigned i;
+       unsigned int list_size;
        gnutls_datum_t oresp;
+       const gnutls_datum_t * peers;
 
-       ret = gnutls_ocsp_status_request_get(session, &oresp);
-       if (ret < 0) {
-               oresp.data = NULL;
-               oresp.size = 0;
-       }
+       peers = gnutls_certificate_get_peers(session, &list_size);
+
+       if (!ENABLED_OPT(VERBOSE) || peers == NULL)
+               return;
+
+       for (i = 0; i < list_size; i++) {
+               ret = gnutls_ocsp_status_request_get2(session, i, &oresp);
+               if (ret < 0) {
+                       oresp.data = NULL;
+                       oresp.size = 0;
+                       continue;
+               }
 
-       if (ENABLED_OPT(VERBOSE) && oresp.data) {
                gnutls_ocsp_resp_t r;
                gnutls_datum_t p;
                unsigned flag;