From d0809b5ed8cfa0c035364e0fc4076d693a68339e Mon Sep 17 00:00:00 2001 From: beck <> Date: Thu, 2 Sep 2021 11:58:30 +0000 Subject: Call the ocsp callback if present and we get no response, instead of succeeding unconditionally. Makes muststaple work with tls1.3 in nc ok tb@ --- src/lib/libssl/tls13_lib.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) (limited to 'src/lib') diff --git a/src/lib/libssl/tls13_lib.c b/src/lib/libssl/tls13_lib.c index 77b4364f56..6615efc4d2 100644 --- a/src/lib/libssl/tls13_lib.c +++ b/src/lib/libssl/tls13_lib.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tls13_lib.c,v 1.60 2021/08/30 19:25:43 jsing Exp $ */ +/* $OpenBSD: tls13_lib.c,v 1.61 2021/09/02 11:58:30 beck Exp $ */ /* * Copyright (c) 2018, 2019 Joel Sing * Copyright (c) 2019 Bob Beck @@ -195,8 +195,7 @@ tls13_legacy_ocsp_status_recv_cb(void *arg) SSL *s = ctx->ssl; int ret; - if (s->ctx->internal->tlsext_status_cb == NULL || - s->internal->tlsext_ocsp_resp == NULL) + if (s->ctx->internal->tlsext_status_cb == NULL) return 1; ret = s->ctx->internal->tlsext_status_cb(s, -- cgit v1.2.3-55-g6feb