From f54a50bc6cdb215c2cc7d6fb4ca524e109f0411c Mon Sep 17 00:00:00 2001 From: Paul Kehrer Date: Wed, 17 Jun 2015 18:31:26 -0600 Subject: support OCSPNoCheck in the OpenSSL backend --- src/cryptography/hazmat/backends/openssl/x509.py | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src') diff --git a/src/cryptography/hazmat/backends/openssl/x509.py b/src/cryptography/hazmat/backends/openssl/x509.py index f46dd1b7..a836e6a7 100644 --- a/src/cryptography/hazmat/backends/openssl/x509.py +++ b/src/cryptography/hazmat/backends/openssl/x509.py @@ -288,6 +288,8 @@ class _Certificate(object): value = _decode_certificate_policies(self._backend, ext) elif oid == x509.OID_CRL_DISTRIBUTION_POINTS: value = _decode_crl_distribution_points(self._backend, ext) + elif oid == x509.OID_OCSP_NO_CHECK: + value = x509.OCSPNoCheck() elif critical: raise x509.UnsupportedExtension( "{0} is not currently supported".format(oid), oid -- cgit v1.2.3