c7b175eea3
- New upstream release 1.63
- Improvements to OCSP support: it turns out that some CAs (like Verisign)
sign the OCSP response with the CA we have in the trust store and don't
attach this certifcate in the response, but OpenSSL by itself only
considers the certificates included in the response and
SSL_OCSP_response_verify added the certificates in the chain too, so now
we also add the trusted CA from the store which signed the lowest chain
certificate, at least if we could not verify the OCSP response without
doing it
- Fixed some compiler warnings
- BR: perl(HTTP::Tiny) for test suite
2 lines
57 B
Plaintext
2 lines
57 B
Plaintext
9b95548e1ed415f8aeed0e004fa68226 Net-SSLeay-1.63.tar.gz
|