kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

tool: show if server sent OCSP staple

Browse Source 
Change-Id: Ib9df4e8f797c9af3362354cc6716171fd65600de
Reviewed-on: https://boringssl-review.googlesource.com/12720
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
This commit is contained in:
Alessandro Ghedini 2016-12-12 14:48:55 +00:00 committed by CQ bot account: commit-bot@chromium.org
parent f440e827f1
commit 1149ee1d38
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
tool/transport_common.cc
View File

@ -272,6 +272,13 @@ void PrintConnectionInfo(const SSL *ssl) {
fprintf(stderr, " Client sent SNI: %s\n", host_name); fprintf(stderr, " Client sent SNI: %s\n", host_name);
} }
if (!SSL_is_server(ssl)) {
const uint8_t *ocsp_staple;
size_t ocsp_staple_len;
SSL_get0_ocsp_response(ssl, &ocsp_staple, &ocsp_staple_len);
fprintf(stderr, " OCSP staple: %s\n", ocsp_staple_len > 0 ? "yes" : "no");
}
// Print the server cert subject and issuer names. // Print the server cert subject and issuer names.
bssl::UniquePtr<X509> peer(SSL_get_peer_certificate(ssl)); bssl::UniquePtr<X509> peer(SSL_get_peer_certificate(ssl));
if (peer != nullptr) { if (peer != nullptr) {