File tree Expand file tree Collapse file tree 1 file changed +8
-0
lines changed
android/rustls-platform-verifier/src/main/java/org/rustls/platformverifier Expand file tree Collapse file tree 1 file changed +8
-0
lines changed Original file line number Diff line number Diff line change @@ -357,6 +357,14 @@ internal object CertificateVerifier {
357
357
try {
358
358
validator.validate(certFactory.generateCertPath(validChain), parameters)
359
359
} catch (e: CertPathValidatorException ) {
360
+ // LetsEncrypt no longer include OCSP information (as OCSP is being deprecated) which Android is not
361
+ // happy with since it *only* tries OCSP by default. We aren't 100% decided on how to fix this yet for real
362
+ // (see https://github.com/rustls/rustls-platform-verifier/pull/179) so for now we implement an out for
363
+ // tests to allow regular maintenance to proceed.
364
+ if (BuildConfig .TEST && e.reason == CertPathValidatorException .BasicReason .UNDETERMINED_REVOCATION_STATUS ) {
365
+ return VerificationResult (StatusCode .Ok )
366
+ }
367
+
360
368
return VerificationResult (StatusCode .Revoked , e.toString())
361
369
}
362
370
} else {
You can’t perform that action at this time.
0 commit comments