Merge branch 'ocsp-constraints'
authorMartin Willi <martin@revosec.ch>
Mon, 31 Mar 2014 12:44:50 +0000 (14:44 +0200)
committerMartin Willi <martin@revosec.ch>
Mon, 31 Mar 2014 12:44:50 +0000 (14:44 +0200)
commit11614d783b8e9b14dfe68c4bef3514e7b751ca31
tree78316a3926aeef1358ad770fee3401fc56af7fa7
parentefce234de43cd42c624b1ba62d37168c521a526e
parent91d71abb16a9b15bbcd7f6cbefb806408be3b92d
Merge branch 'ocsp-constraints'

Limits cached OCSP verification to responses signed by the CA, a directly
delegated signer or a pre-installed OCSP responder certificate. Disables
auth config merge for revocation trust-chain strength checkin, as it breaks
CA constraints in some scenarios.