Hi Emeric,

ocsp_status can be 'good', 'revoked', or 'unknown'. 'revoked' status
is a correct status and ocsp response should not be dropped.
In case of certificate with OCSP must-stapling extension, response with
'revoked' status must be provided as well as 'good' status.

++
Manu


Attachment: 0001-MINOR-ssl-ocsp-response-with-revoked-status-is-corre.patch
Description: Binary data

Reply via email to