New ocspcheck utility to validate a certificate against its ocsp responder

and save the reply for stapling

ok deraadt@ jsing@

1 files changed, 24 insertions, 0 deletions

diff --git a/src/usr.sbin/ocspcheck/Makefile b/src/usr.sbin/ocspcheck/Makefile
new file mode 100644
index 0000000000..55d9b5b763
--- /dev/null
+++ b/src/usr.sbin/ocspcheck/Makefile
@@ -0,0 +1,24 @@
+#       $OpenBSD: Makefile,v 1.1 2017/01/24 08:50:57 beck Exp $
+
+PROG=   ocspcheck
+
+LDADD=  -ltls -lssl -lcrypto
+DPADD=   ${LIBTLS} ${LIBSSL} ${LIBCRYPTO}
+MAN= ocspcheck.8
+
+CFLAGS+= -Wall -Werror
+CFLAGS+= -Wformat
+CFLAGS+= -Wformat-security
+CFLAGS+= -Wimplicit
+CFLAGS+= -Wreturn-type
+CFLAGS+= -Wshadow
+CFLAGS+= -Wtrigraphs
+CFLAGS+= -Wuninitialized
+CFLAGS+= -Wunused
+
+CFLAGS+= -DLIBRESSL_INTERNAL
+
+SRCS=   ocspcheck.c http.c
+
+
+.include <bsd.prog.mk>