Function ocspStapleToCert

proxy/server/server.go:500–520

(stapler stapler.Stapler, hostCfg engine.Host, keyPair *tls.Certificate, opts ...stapler.StapleHostOption)

}

func ocspStapleToCert(stapler stapler.Stapler, hostCfg engine.Host, keyPair *tls.Certificate, opts ...stapler.StapleHostOption) {
	if !hostCfg.Settings.OCSP.Enabled {
		return
	}

	log.Infof("OCSP is enabled for %v, resolvers: %v", hostCfg, hostCfg.Settings.OCSP.Responders)

	r, err := stapler.StapleHost(&hostCfg, opts...)

	if err != nil {
		log.Warningf("Failed to staple %v, error %v", hostCfg, err)
		return
	}

	if r.Response.Status != ocsp.Good && r.Response.Status != ocsp.Revoked {
		log.Warningf("Got undefined status from OCSP responder: %v", r.Response.Status)
		return
	}

	keyPair.OCSPStaple = r.Staple
}

// Returns a certificate based on a hosts KeyPair settings.
func certForHost(hostCfg engine.Host) (tls.Certificate, error) {