Hi there,
I was trying to make stunnel ignore OCSP verification error for local certificates when doing OCSP Stapling. But it seems the flag "OCSPflag = NOVERIFY" is not properly passed to openssl.
I have tried to patch it in function ocsp_stapling(), and it worked.
But I wonder whether it is a bug or intentionally designed this way?
With kind regards!
------------------------------------------------------------
King's Way <io[AT]stdio.io<http://stdio.io>>