Function check_ocsp

tools/ocsptest.py:29–49

(host: str, port: int, capath: str)

def check_ocsp(host: str, port: int, capath: str) -> None:
    ctx = get_ssl_context(
        None,  # certfile
        None,  # passphrase
        capath,  # ca_certs
        None,  # crlfile
        False,  # allow_invalid_certificates
        False,  # allow_invalid_hostnames
        False,
        True,  # is sync
    )  # disable_ocsp_endpoint_check

    # Ensure we're using pyOpenSSL.
    assert isinstance(ctx, SSLContext)

    s = socket.socket()
    s.connect((host, port))
    try:
        s = ctx.wrap_socket(s, server_hostname=host)  # type: ignore[assignment]
    finally:
        s.close()


def main() -> None: