From a9b4f86de8a0de2e846a42d9b35c39e88d621bb7 Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Wed, 24 Oct 2018 08:58:07 +0800 Subject: next_update is not a required field on OCSP responses (#4513) --- src/cryptography/hazmat/backends/openssl/ocsp.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src') diff --git a/src/cryptography/hazmat/backends/openssl/ocsp.py b/src/cryptography/hazmat/backends/openssl/ocsp.py index cd3650ae..32e26a0a 100644 --- a/src/cryptography/hazmat/backends/openssl/ocsp.py +++ b/src/cryptography/hazmat/backends/openssl/ocsp.py @@ -278,8 +278,10 @@ class _OCSPResponse(object): self._backend._ffi.NULL, asn1_time, ) - self._backend.openssl_assert(asn1_time[0] != self._backend._ffi.NULL) - return _parse_asn1_generalized_time(self._backend, asn1_time[0]) + if asn1_time[0] != self._backend._ffi.NULL: + return _parse_asn1_generalized_time(self._backend, asn1_time[0]) + else: + return None @property @_requires_successful_response -- cgit v1.2.3