Support OCSP Must-Staple

zenhack / simp_le

Simple Let's Encrypt client

GNU General Public License v3.0

223 stars 38 forks source link

Support OCSP Must-Staple #130

Open 9ary opened 4 years ago

9ary commented 4 years ago

Must-Staple is a certificate field that tells clients to refuse connection when an OCSP staple was not provided by the server. I am migrating from the abandoned cross-platform version of the OpenBSD client which supported this feature, but I've noticed that simp_le does not. More info: https://scotthelme.co.uk/ocsp-must-staple/

zenhack commented 4 years ago

I agree, we should add this. If it's straightforward I may add it before kicking out a release in the next few days. PRs welcome too.

9ary commented 4 years ago

Thanks! I'll try taking a look to see what's needed to support this.

zenhack commented 4 years ago

Planning to kick out a release, today, but I don't think I'm going to fine time to do this before then.