diff options
| author | Bob Beck <beck@cvs.openbsd.org> | 2021-09-02 11:58:31 +0000 |
|---|---|---|
| committer | Bob Beck <beck@cvs.openbsd.org> | 2021-09-02 11:58:31 +0000 |
| commit | 9534a0afc9c8c3a8399ce24eba29c5201abae8de (patch) | |
| tree | 5397515d64001358a65025038fff243cee843984 /lib/libssl | |
| parent | 7e09abc972ed5000a1396e0032e98c7749a12678 (diff) | |
Call the ocsp callback if present and we get no response, instead of
succeeding unconditionally. Makes muststaple work with tls1.3 in nc
ok tb@
Diffstat (limited to 'lib/libssl')
| -rw-r--r-- | lib/libssl/tls13_lib.c | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/lib/libssl/tls13_lib.c b/lib/libssl/tls13_lib.c index 77b4364f566..6615efc4d2b 100644 --- a/lib/libssl/tls13_lib.c +++ b/lib/libssl/tls13_lib.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tls13_lib.c,v 1.60 2021/08/30 19:25:43 jsing Exp $ */ +/* $OpenBSD: tls13_lib.c,v 1.61 2021/09/02 11:58:30 beck Exp $ */ /* * Copyright (c) 2018, 2019 Joel Sing <jsing@openbsd.org> * Copyright (c) 2019 Bob Beck <beck@openbsd.org> @@ -195,8 +195,7 @@ tls13_legacy_ocsp_status_recv_cb(void *arg) SSL *s = ctx->ssl; int ret; - if (s->ctx->internal->tlsext_status_cb == NULL || - s->internal->tlsext_ocsp_resp == NULL) + if (s->ctx->internal->tlsext_status_cb == NULL) return 1; ret = s->ctx->internal->tlsext_status_cb(s, |