starred/certbot-certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-08-01 19:02:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Openssl black magic

Browse Source 
* With _some_ versions of openssl, when checking OCSP for staging certs
   only, we need this -trust_other flag
This commit is contained in:
Peter Eckersley
2017-01-05 11:04:01 -08:00
parent 4d312d8ffe
commit b1be49c14f
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
certbot/ocsp.py
+1
View File
@@ -56,6 +56,7 @@ class RevocationChecker(object):
"-url", url, "-url", url,
"-CAfile", chain_path, "-CAfile", chain_path,
"-verify_other", chain_path, "-verify_other", chain_path,
"-trust_other",
"-header"] + self.host_args(host) "-header"] + self.host_args(host)
logger.debug("Querying OCSP for %s", cert_path) logger.debug("Querying OCSP for %s", cert_path)
logger.debug(" ".join(cmd)) logger.debug(" ".join(cmd))