rbeckman-nextgen / test-mc6

0 stars 0 forks source link

OCSP revocation checking doesn't handle multiple responses correctly #4261

Closed rbeckman-nextgen closed 4 years ago

rbeckman-nextgen commented 4 years ago

When multiple responses are returned, the OCSP code assumes that all responses are for the certificate being tested. However some servers can return responses for multiple certificates all at once. We should make sure that the response serial number matches the certificate being tested before looking at the revocation status.

Imported Issue. Original Details: Jira Issue Key: MIRTH-4410 Reporter: narupley Created: 2019-05-01T14:22:48.000-0700