Openssl black magic

* With _some_ versions of openssl, when checking OCSP for staging certs only, we need this -trust_other flag
2026-07-26 15:48:52 +02:00 · 2017-01-05 11:04:01 -08:00
parent 4d312d8ffe
commit b1be49c14f
1 changed files with 1 additions and 0 deletions
@@ -56,6 +56,7 @@ class RevocationChecker(object):
               "-url", url,
               "-CAfile", chain_path,
               "-verify_other", chain_path,
+               "-trust_other",
               "-header"] + self.host_args(host)
        logger.debug("Querying OCSP for %s", cert_path)
        logger.debug(" ".join(cmd))