Merge pull request #104 from chrismoos/fix_ocsp

GetOCSPForCert should fail if there are no OCSP servers in the cert.
This commit is contained in:
Matt Holt 2016-02-07 05:43:23 -07:00
commit 4efc9abf53

View file

@ -90,6 +90,10 @@ func GetOCSPForCert(bundle []byte) ([]byte, *ocsp.Response, error) {
issuedCert := certificates[0]
issuerCert := certificates[1]
if len(issuedCert.OCSPServer) == 0 {
return nil, nil, errors.New("no OCSP server specified in cert")
}
// Finally kick off the OCSP request.
ocspReq, err := ocsp.CreateRequest(issuedCert, issuerCert, nil)
if err != nil {