New ocspcheck utility to validate a certificate against its ocsp responder

and save the reply for stapling

ok deraadt@ jsing@

1 files changed, 24 insertions, 0 deletions

diff --git a/usr.sbin/ocspcheck/Makefile b/usr.sbin/ocspcheck/Makefile
new file mode 100644
index 00000000000..55d9b5b7630
--- /dev/null
+++ b/usr.sbin/ocspcheck/Makefile
@@ -0,0 +1,24 @@
+#	$OpenBSD: Makefile,v 1.1 2017/01/24 08:50:57 beck Exp $
+
+PROG=	ocspcheck
+
+LDADD=	-ltls -lssl -lcrypto
+DPADD=	 ${LIBTLS} ${LIBSSL} ${LIBCRYPTO}
+MAN= ocspcheck.8
+
+CFLAGS+= -Wall -Werror
+CFLAGS+= -Wformat
+CFLAGS+= -Wformat-security
+CFLAGS+= -Wimplicit
+CFLAGS+= -Wreturn-type
+CFLAGS+= -Wshadow
+CFLAGS+= -Wtrigraphs
+CFLAGS+= -Wuninitialized
+CFLAGS+= -Wunused
+
+CFLAGS+= -DLIBRESSL_INTERNAL
+
+SRCS=	ocspcheck.c http.c
+
+
+.include <bsd.prog.mk>