OCSP: treat all failures as unsupported (even temporarily)

webprofusion-chrisc · webprofusion-chrisc · commit 3545d81c8b4f · 2025-06-19T15:33:12.000+08:00
diff --git a/src/Certify.Shared/Management/CertificateManager.cs b/src/Certify.Shared/Management/CertificateManager.cs
@@ -212,9 +212,8 @@ public static string[] CheckCertChain(X509Certificate2 cert)
             }
             catch (Exception)
             {
-                log?.Warning("Failed to Check Ocsp Revoked Status {file}", filename);
-
-                return Models.Certify.Models.CertificateStatusType.Unknown;
+                // ocsp details not available, responder not available or unsupported
+                return Models.Certify.Models.CertificateStatusType.OcspNotSupported;
             }
         }
 

Original file line number	Diff line number	Diff line change
`@@ -212,9 +212,8 @@ public static string[] CheckCertChain(X509Certificate2 cert)`
`212`	`212`	`}`
`213`	`213`	`catch (Exception)`
`214`	`214`	`{`
`215`		`- log?.Warning("Failed to Check Ocsp Revoked Status {file}", filename);`
`216`		`-`
`217`		`- return Models.Certify.Models.CertificateStatusType.Unknown;`
	`215`	`+ // ocsp details not available, responder not available or unsupported`
	`216`	`+ return Models.Certify.Models.CertificateStatusType.OcspNotSupported;`
`218`	`217`	`}`
`219`	`218`	`}`
`220`	`219`