Re: [exim] OCSP stapling failure with letsencrypt

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Jeremy Harris
Ημερομηνία:  
Προς: exim-users
Αντικείμενο: Re: [exim] OCSP stapling failure with letsencrypt
On 27/10/16 21:09, Renaud Allard wrote:
> In openssl source, you can see that the call should be something like:
> OCSP_basic_verify(bs, verify_other, store, verify_flags);


That's overstating the case, "Can be". The question is, when is
is appropriate and safe from a security standpoint to verify
the OCSP proof using an alternate set-of-trust-anchors?

--
Cheers,
Jeremy