sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-03 00:00:24 -04:00
Code Issues Projects Releases Wiki Activity

pki: Generate internal error OCSP response if no signer certificate is found

Browse Source 
That can happen if a request is sent to the wrong OCSP server.
This commit is contained in:
Tobias Brunner 2023-11-23 17:54:40 +01:00
parent 05a1f5b9c5
commit 945be4ece5
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/pki/commands/ocsp.c
View File

@ -528,6 +528,11 @@ gen:
ocsp_status = OCSP_INTERNALERROR;
}
}
else
{
DBG1(DBG_APP, "no signer certificate found");
ocsp_status = OCSP_INTERNALERROR;
}
DBG1(DBG_APP, "ocspResponseStatus: %N", ocsp_status_names, ocsp_status);
enumerator = responses->create_enumerator(responses);