1 Dec
2025
1 Dec
'25
12:45 p.m.
Hi there, I was trying to make stunnel ignore OCSP verification error for local certificates when doing OCSP Stapling. But it seems the flag "OCSPflag = NOVERIFY" is not properly passed to openssl. I have tried to patch it in function ocsp_stapling(), and it worked. But I wonder whether it is a bug or intentionally designed this way? With kind regards! ------------------------------------------------------------ King's Way <io[AT]stdio.io<http://stdio.io>>