TLS client: OCSP stapling with ocsp_multi option (RFC 6961)
authorJouni Malinen <jouni@qca.qualcomm.com>
Tue, 22 Dec 2015 17:39:37 +0000 (19:39 +0200)
committerJouni Malinen <j@w1.fi>
Tue, 22 Dec 2015 18:44:56 +0000 (20:44 +0200)
commitb5677752b2070e37aa7e04f625f08821bc086e55
tree4c1a273fdf84869b16a29a9f983dc1b4941d0c0f
parent8ea6a270030ab67bfc1551904c07ec296bbf9b91
TLS client: OCSP stapling with ocsp_multi option (RFC 6961)

This adds a minimal support for using status_request_v2 extension and
ocsp_multi format (OCSPResponseList instead of OCSPResponse) for
CertificateStatus. This commit does not yet extend use of OCSP stapling
to validate the intermediate CA certificates.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
src/tls/tlsv1_client_read.c
src/tls/tlsv1_client_write.c