Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CDRIVER-3668 support OCSP back to OpenSSL 1.0.1 #623

Merged
merged 3 commits into from
Jun 5, 2020
Merged

CDRIVER-3668 support OCSP back to OpenSSL 1.0.1 #623

merged 3 commits into from
Jun 5, 2020

Commits on May 29, 2020

  1. CDRIVER-3668 support OCSP back to OpenSSL 1.0.1 

    - change SSL_CTX_set_tlsext_status_type to SSL_set_tlsext_status_type.
- polyfill SSL_get0_verified_chain, NID_tlsfeature, and hostname check.
- check for status_request from the tlsfeature extension when inspecting peer certificate.
- skip time check for older OpenSSL when updating cache entries.
- perform the OCSP check after the handshake, since sometimes the peer certificate is not available in the callback in OpenSSL <= 1.0.2.
- check tlsDisableOCSPEndpointCheck before reaching out to a responder.
- make tlsDisableOCSPEndpointCheck and tlsDisableCertificateRevocationCheck URI options implicitly enable TLS.
- enable OCSP tests on OpenSSL and macOS that were skipped.
- add OCSP tests for OpenSSL 1.0.1.
- update OCSP OpenSSL documentation.
- change OCSP verification logs from MONGOC_DEBUG to TRACE in successful cases.
    @kevinAlbs
    kevinAlbs committed May 29, 2020
    Configuration menu
    Copy the full SHA
    b8de890 View commit details
    Browse the repository at this point in the history

  2. regenerate tests

    @kevinAlbs
    kevinAlbs committed May 29, 2020
    Configuration menu
    Copy the full SHA
    ed27348 View commit details
    Browse the repository at this point in the history

  3. fix and test DER parsing

    @kevinAlbs
    kevinAlbs committed May 29, 2020
    Configuration menu
    Copy the full SHA
    54df966 View commit details
    Browse the repository at this point in the history