mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Correct OSCP Must-Staple cert check for OpenSSL 1.1.1. Fixes #9408

Browse Source
This commit is contained in:
jim-p 2019-03-18 12:47:05 -04:00
parent b39d615394
commit 0d82f93b68
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/etc/inc/certs.inc
View File

@ -667,7 +667,8 @@ function cert_get_ocspstaple($str_crt, $decode = true) {
$str_crt = base64_decode($str_crt);
}
$crt_details = openssl_x509_parse($str_crt);
if (!empty($crt_details['extensions']['1.3.6.1.5.5.7.1.24'])) {
if (($crt_details['extensions']['tlsfeature'] == "status_request") ||
!empty($crt_details['extensions']['1.3.6.1.5.5.7.1.24'])) {
return true;
}
return false;