{"push_id":2681210537,"size":1,"distinct_size":1,"ref":"refs/heads/stapled_ocsp_revocation_check","head":"b5595a92058146e789bf7ac21aba03a31a6c9d33","before":"4aabc3f99969ff0f4e537bdf6756427327ca2899","commits":[{"sha":"b5595a92058146e789bf7ac21aba03a31a6c9d33","author":{"name":"David Cooper","email":"7dbfdd6041b2c15406b5ab98120e2bf016dab18a@nist.gov"},"message":"Check stapled OCSP response for revocation status\n\nIn cases in which the server offers a stapled OCSP response, this commit extracts the OCSP response and then checks the response for the status of the server's certificate. The check is performed in the same way as when the certificate includes an OCSP URI and the \"--phone-out\" option is set, except that the OCSP response is received from the TLS server rather than coming directly from the OCSP responder. Since this only involves additional processing of data that testssl.sh is already receiving, the check is performed whether or not the \"--phone-out\" flag is set.","distinct":true,"url":"https://api.github.com/repos/dcooper16/testssl.sh/commits/b5595a92058146e789bf7ac21aba03a31a6c9d33"}]}
{"actor":{"display_login":"dcooper16"}}