summaryrefslogtreecommitdiffstats
path: root/src/net
diff options
context:
space:
mode:
authorMichael Brown2018-03-18 21:21:49 +0100
committerMichael Brown2018-03-18 21:25:01 +0100
commita0021a30dd8db832714e327bbbc65d3589f528ab (patch)
treefacbeee3dc57ac4d3cd314236e087e285ce14289 /src/net
parent[profile] Prevent potential division by zero (diff)
downloadipxe-a0021a30dd8db832714e327bbbc65d3589f528ab.tar.gz
ipxe-a0021a30dd8db832714e327bbbc65d3589f528ab.tar.xz
ipxe-a0021a30dd8db832714e327bbbc65d3589f528ab.zip
[ocsp] Centralise test for whether or not an OCSP check is required
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/net')
-rw-r--r--src/net/validator.c3
1 files changed, 1 insertions, 2 deletions
diff --git a/src/net/validator.c b/src/net/validator.c
index 68abe1b5..40f778c7 100644
--- a/src/net/validator.c
+++ b/src/net/validator.c
@@ -488,8 +488,7 @@ static void validator_step ( struct validator *validator ) {
/* The issuer is valid, but this certificate is not
* yet valid. If OCSP is applicable, start it.
*/
- if ( cert->extensions.auth_info.ocsp.uri.len &&
- ( ! cert->extensions.auth_info.ocsp.good ) ) {
+ if ( ocsp_required ( cert ) ) {
/* Start OCSP */
if ( ( rc = validator_start_ocsp ( validator, cert,
issuer ) ) != 0 ) {