added match check and remove on failure - relates to github #1789

Author: dghgit

prov/src/main/java/org/bouncycastle/jce/provider/OcspCache.java

@@ -73,13 +73,15 @@ static OCSPResponse getOcspResponse(
                 ResponseData responseData = ResponseData.getInstance(basicResp.getTbsResponseData());
 
                 ASN1Sequence s = responseData.getResponses();
+                boolean matchFound = false;
 
                 for (int i = 0; i != s.size(); i++)
                 {
                     SingleResponse resp = SingleResponse.getInstance(s.getObjectAt(i));
 
                     if (certID.equals(resp.getCertID()))
                     {
+                        matchFound = true;
                         ASN1GeneralizedTime nextUp = resp.getNextUpdate();
                         try
                         {
@@ -97,9 +99,18 @@ static OCSPResponse getOcspResponse(
                         }
                     }
                 }
-                if (response != null)
+
+                if (matchFound)
+                {
+                    if (response != null)
+                    {
+                        return response;
+                    }
+                }
+                else
                 {
-                    return response;
+                    // this should also never happen, however...
+                    responseMap.remove(certID);
                 }
             }
         }