mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #6196 from bandi13/zd15783

Browse Source 
OCSP_CERT_UNKNOWN
This commit is contained in:
JacobBarthelmeh 2023-03-17 14:33:57 -06:00 committed by GitHub
commit 9c3cfab328
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/ocsp.c
View File

@ -395,7 +395,11 @@ int CheckOcspResponse(WOLFSSL_OCSP *ocsp, byte *response, int responseSz,
end: end:
if (ret == 0 && validated == 1) { if (ret == 0 && validated == 1) {
WOLFSSL_MSG("New OcspResponse validated"); WOLFSSL_MSG("New OcspResponse validated");
} else if ((ret == ocsp->error) && (ocspResponse->single->status->status == CERT_UNKNOWN)) {
WOLFSSL_MSG("OCSP unknown");
ret = OCSP_CERT_UNKNOWN;
} else if (ret != OCSP_CERT_REVOKED) { } else if (ret != OCSP_CERT_REVOKED) {
WOLFSSL_MSG("OCSP lookup failure");
ret = OCSP_LOOKUP_FAIL; ret = OCSP_LOOKUP_FAIL;
} }
@ -463,7 +467,7 @@ int CheckOcspRequest(WOLFSSL_OCSP* ocsp, OcspRequest* ocspRequest,
return ret; return ret;
} }
WOLFSSL_LEAVE("CheckOcspRequest", ocsp->error); WOLFSSL_LEAVE("CheckOcspRequest", ocsp->error);
return OCSP_LOOKUP_FAIL; return ret;
} }
#endif #endif