ocsp checking needs -verify_other

https://community.letsencrypt.org/t/unable-to-verify-ocsp-response/7264
2026-07-27 00:00:44 +02:00 · 2016-12-21 14:38:26 -08:00
parent 40e29bb95f
commit ac02cd9cb8
1 changed files with 3 additions and 2 deletions
@@ -40,9 +40,10 @@ def revoked_status(cert_path, chain_path):
            "-issuer", chain_path,
            "-cert", cert_path,
            "-url", url,
-            "-CAfile", chain_path])
+            "-CAfile", chain_path,
+            "-verify_other", chain_path])
    except errors.SubprocessError:
-        return "(OCSP Failure)"
+        return "OCSP Failure"

    return _translate_ocsp_query(cert_path, output)