From e2f341198f8d5d67751bfe5809934d1d87e8e764 Mon Sep 17 00:00:00 2001 From: xenolf Date: Thu, 21 Jul 2016 03:32:56 +0200 Subject: [PATCH] Remove unneeded re-checking of OCSP responses. The stdlib has us covered already. Fixes #247 --- acme/crypto.go | 7 ------- 1 file changed, 7 deletions(-) diff --git a/acme/crypto.go b/acme/crypto.go index 33240b61..af97f5d1 100644 --- a/acme/crypto.go +++ b/acme/crypto.go @@ -115,13 +115,6 @@ func GetOCSPForCert(bundle []byte) ([]byte, *ocsp.Response, error) { return nil, nil, err } - if ocspRes.Certificate == nil { - err = ocspRes.CheckSignatureFrom(issuerCert) - if err != nil { - return nil, nil, err - } - } - return ocspResBytes, ocspRes, nil }