Hi Emeric,
ocsp_status can be 'good', 'revoked', or 'unknown'. 'revoked' status is a correct status and ocsp response should not be dropped. In case of certificate with OCSP must-stapling extension, response with 'revoked' status must be provided as well as 'good' status. ++ Manu
0001-MINOR-ssl-ocsp-response-with-revoked-status-is-corre.patch
Description: Binary data