Support OCSP Must-Staple

Open 9ary opened this issue 6 years ago • 3 comments

Must-Staple is a certificate field that tells clients to refuse connection when an OCSP staple was not provided by the server. I am migrating from the abandoned cross-platform version of the OpenBSD client which supported this feature, but I've noticed that simp_le does not. More info: https://scotthelme.co.uk/ocsp-must-staple/

Dec 14 '19 15:12 9ary

I agree, we should add this. If it's straightforward I may add it before kicking out a release in the next few days. PRs welcome too.

Dec 14 '19 22:12 zenhack

Thanks! I'll try taking a look to see what's needed to support this.

Dec 15 '19 06:12 9ary

Planning to kick out a release, today, but I don't think I'm going to fine time to do this before then.

Dec 23 '19 23:12 zenhack