Add OCSP client side support to libtls.

   - Provide access to certificate OCSP URL
   - Provide ability to check a raw OCSP reply against an
     established TLS ctx
   - Check and validate OCSP stapling info in the TLS handshake
     if a stapled OCSP response is provided.`

Add example code to show OCSP URL and stapled info
into netcat.

ok jsing@

1 files changed, 2 insertions, 1 deletions

diff --git a/src/lib/libtls/Makefile b/src/lib/libtls/Makefile
index 245b1def6e..f90c57d53f 100644
--- a/src/lib/libtls/Makefile
+++ b/src/lib/libtls/Makefile
@@ -1,4 +1,4 @@
-#       $OpenBSD: Makefile,v 1.25 2016/09/19 03:25:22 bcook Exp $
+#       $OpenBSD: Makefile,v 1.26 2016/11/02 15:18:42 beck Exp $
 
 CFLAGS+= -Wall -Werror -Wimplicit
 CFLAGS+= -DLIBRESSL_INTERNAL
@@ -20,6 +20,7 @@ SRCS=	tls.c \
         tls_peer.c \
         tls_server.c \
         tls_util.c \
+        tls_ocsp.c \
         tls_verify.c
 
 MAN=    tls_init.3