2297cc7 p11_child: make sure OCSP checks are done

1 file Authored by sbose 6 years ago, Committed by lslebodn 6 years ago,
    p11_child: make sure OCSP checks are done
    
    If CERT_VerifyCertificateNow() is used with
    'certificateUsageCheckAllUsages' OCSP checks are skipped even if OCSP
    was enabled.
    
    This patch calls CERT_CheckOCSPStatus() explicitly if OCSP checks are
    enabled.
    
    Related to https://pagure.io/SSSD/sssd/issue/3560
    
    Reviewed-by: Fabiano FidĂȘncio <fidencio@redhat.com>
    
        
file modified
+17 -0