From da2efcb6e07677cc8b0860508efb5d07c4f8171d Mon Sep 17 00:00:00 2001
From: lloyd <lloyd@randombit.net>
Date: Thu, 10 Apr 2014 13:59:30 +0000
Subject: Better TLS checks

---
 src/lib/cert/x509/x509path.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'src/lib/cert')

diff --git a/src/lib/cert/x509/x509path.cpp b/src/lib/cert/x509/x509path.cpp
index c1b68e72d..e8e44f653 100644
--- a/src/lib/cert/x509/x509path.cpp
+++ b/src/lib/cert/x509/x509path.cpp
@@ -171,7 +171,8 @@ check_chain(const std::vector<X509_Certificate>& cert_path,
 
       if(!crl_p)
          {
-         status.insert(Certificate_Status_Code::NO_REVOCATION_DATA);
+         if(restrictions.require_revocation_information())
+            status.insert(Certificate_Status_Code::NO_REVOCATION_DATA);
          continue;
          }
 
-- 
cgit v1.2.3