feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

OCSP Nonces are not critical extensions. Allow a response to be missing the nonce.

Browse Source
This commit is contained in:
John Safranek
2013-11-20 13:46:46 -08:00
parent c545202de0
commit 67b1b00a2c
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ctaocrypt/src/asn.c
View File

@ -5738,7 +5738,9 @@ int CompareOcspReqResp(OcspRequest* req, OcspResponse* resp)
return 1; return 1;
} }
if (req->useNonce) { /* Nonces are not critical. The responder may not necessarily add
* the nonce to the response. */
if (req->useNonce && resp->nonceSz != 0) {
cmp = req->nonceSz - resp->nonceSz; cmp = req->nonceSz - resp->nonceSz;
if (cmp != 0) if (cmp != 0)
{ {