feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

Merge pull request #7828 from miyazakh/zd18141_ocspv2multi

Browse Source 
Sever side checks OCSP even if it uses v2 multi
This commit is contained in:
Daniel Pouzzner
2024-08-07 17:40:23 -05:00
committed by GitHub
parent 92952a5538 c947fc8fda
commit 0ab1f1969d
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/internal.c
View File

@@ -14806,7 +14806,9 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
#ifdef HAVE_OCSP
#ifdef HAVE_CERTIFICATE_STATUS_REQUEST_V2
addToPendingCAs = 0;
if (ssl->status_request_v2 && TLSX_CSR2_IsMulti(ssl->extensions)) {
if (ssl->options.side == WOLFSSL_CLIENT_END &&
ssl->status_request_v2 &&
TLSX_CSR2_IsMulti(ssl->extensions)) {
ret = TLSX_CSR2_InitRequests(ssl->extensions,
args->dCert, 0, ssl->heap);
addToPendingCAs = 1;