Johanna Amann 8f1cbb8b0a Fix ocsp reply validation - there were a few things that definitely were wrong. ...

Now the right signer certificate for the reply is looked up (and no longer assumed that it is the first one) and a few compares are fixed. Plus - there are more test cases that partially send certificates in the ocsp message and partially do not - and it seems to work fine in all cases.

Addresses BIT-1212

2014-09-04 12:22:55 -07:00

6.4 KiB

Raw History

View raw