Remove unneeded re-checking of OCSP responses. The stdlib has us covered already.

Fixes #247
This commit is contained in:
xenolf 2016-07-21 03:32:56 +02:00
parent 029ece0fd2
commit e2f341198f

View file

@ -115,13 +115,6 @@ func GetOCSPForCert(bundle []byte) ([]byte, *ocsp.Response, error) {
return nil, nil, err
}
if ocspRes.Certificate == nil {
err = ocspRes.CheckSignatureFrom(issuerCert)
if err != nil {
return nil, nil, err
}
}
return ocspResBytes, ocspRes, nil
}