Merge pull request #7828 from miyazakh/zd18141_ocspv2multi

Sever side checks OCSP even if it uses v2 multi
wolfSSL · Aug 7, 2024 · 0ab1f19 · 0ab1f19
2 parents 92952a5 + c947fc8
commit 0ab1f19
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/internal.c b/src/internal.c
@@ -14806,7 +14806,9 @@ int ProcessPeerCerts(WOLFSSL* ssl, byte* input, word32* inOutIdx,
                 #ifdef HAVE_OCSP
                     #ifdef HAVE_CERTIFICATE_STATUS_REQUEST_V2
                         addToPendingCAs = 0;
-                        if (ssl->status_request_v2 && TLSX_CSR2_IsMulti(ssl->extensions)) {
+                        if (ssl->options.side == WOLFSSL_CLIENT_END &&
+                            ssl->status_request_v2 &&
+                            TLSX_CSR2_IsMulti(ssl->extensions)) {
                             ret = TLSX_CSR2_InitRequests(ssl->extensions,
                                                     args->dCert, 0, ssl->heap);
                             addToPendingCAs = 1;