[gnutls-devel] OCSP for www.google.com

[Nikos Mavrogiannopoulos]

On Thu, Jan 15, 2015 at 2:50 PM, Tim Ruehsen <tim.ruehsen at gmx.de> wrote:
> Hi,
> using gnutls-cli (3.3.11-1 from Debian Experimental) with --ocsp does not work
> for www.google.com. My question is, does gnutls and/or google fail ?

It seems gnutls-cli (and ocsptool) fail early when they don't
understand the first entry in the AIA extension.

This patch on ocsptool fixes the issue:
https://gitorious.org/gnutls/gnutls/commit/11eebe14b232ec198d1446a3720e6ed78d118c4b

regards,
Nikos