7 Commits

Author	SHA1	Message	Date
Tatsuhiro Tsujikawa	bd3ececdd8	Fix bug that fetch-ocsp-response does not work with OpenSSL 1.1.0 ... The syntax of openssl ocsp -header option has been changed in OpenSSL 1.1.0. And it now does not require -header option anymore. It looks like that it is workaround for 1.0.x versions.	2016-12-12 21:22:48 +09:00
Peter Wu	bdb6581990	Add CMake-related files to EXTRA_DIST	2016-03-12 01:38:12 +01:00
Peter Wu	ee285fa5da	cmake: process script/	2016-02-13 20:13:43 +01:00
Tatsuhiro Tsujikawa	a4156cded3	fetch-ocsp-response: Handle spurious openssl exist status 0 ... With OpenSSL <= 1.0.1, openssl ocsp command still returns exit code 0, even if verification was failed. If that happens certain string is emitted in stderr, so check that string and if exists, treat it as error. This issue was fixed in OpenSSL 1.0.2. At least OpenSSL 1.0.2, openssl ocsp command still returns exit code 0, even if responder returned non-successful status code (e.g., trylater(3)). We are not sure this is intentional or not. To handle this, we again check certain error string in stdout, and if it is found, treat it as error.	2015-08-21 23:28:45 +09:00
Tatsuhiro Tsujikawa	07f763be49	fetch-ocsp-response: Support LibreSSL, and include port in ocsp_host	2015-06-17 18:24:57 +09:00
Tatsuhiro Tsujikawa	4f3d20e024	Include script/README.rst in dist	2015-06-06 23:32:32 +09:00
Tatsuhiro Tsujikawa	b7ba1baf48	Translate fetch-ocsp-response into Python	2015-06-06 23:18:32 +09:00