<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">

<html lang="en">

<head>

<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">

<title>

GitLab

</title>

<style>img {

max-width: 100%; height: auto;

}

</style>

</head>

<body>

<div class="content">

<p style="color: #777777;">

<a href="https://gitlab.com/airtower-luna">Airtower</a>

commented:

</p>

<div style="">

<p dir="auto">Spontaneous thought while reading these comments: It should be possible to record the actually sent OCSP response(s) when using <code>gnutls_certificate_set_retrieve_function3</code>. The callback has full control over which certificate(s) and response(s) to send, and could e.g. log them at will. This would force the application to implement its own selection logic, though.</p>

<p dir="auto">Maybe it'd be possible to make the default certificate and response retrieval method available as API, so applications could easily call it as part of their <code>gnutls_certificate_set_retrieve_function3</code> callbacks?</p>

</div>

</div>

<div class="footer" style="margin-top: 10px;">

<p style="font-size: small; color: #777;">

—

<br>

Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/issues/829#note_261456959">view it on GitLab</a>.

<br>

You're receiving this email because of your account on gitlab.com.

If you'd like to receive fewer emails, you can

<a href="https://gitlab.com/sent_notifications/0b9ba262464b638e69399f796ed32d53/unsubscribe">unsubscribe</a>

from this thread or

adjust your notification settings.

<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/issues/829#note_261456959"}}</script>

</p>

</div>

</body>

</html>