upstream/certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-05-28 04:34:11 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

ocsp checking needs -verify_other

Browse source 
https://community.letsencrypt.org/t/unable-to-verify-ocsp-response/7264
This commit is contained in:
Peter Eckersley 2016-12-19 17:36:37 -08:00
parent 40e29bb95f
commit ac02cd9cb8
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
certbot/ocsp.py
View file

@ -40,9 +40,10 @@ def revoked_status(cert_path, chain_path):
"-issuer", chain_path,
"-cert", cert_path,
"-url", url,
"-CAfile", chain_path])
"-CAfile", chain_path,
"-verify_other", chain_path])
except errors.SubprocessError:
return "(OCSP Failure)"
return "OCSP Failure"
return _translate_ocsp_query(cert_path, output)