tree fb9b865a6eb9d936a8c7f4997b9688b7ab59cbb9
parent 3760e016850398b85094c4c99e955b8c3dea5711
author Adam Langley <agl@golang.org> 1453830625 -0800
committer Adam Langley <agl@golang.org> 1453833638 +0000

x/crypto/ocsp: return errors to reflect OCSP errors.

Previously, OCSP errors (like “malformed request”, not “that certificate
is revoked”) were intended to result in a Response being returned with
Status set to ServerFailed. However, since an “optional” tag was missing
in the ASN.1, a parse error was actually returned.

This CL changes that behaviour so that ParseResponse will now return an
error for these responses. That error will be a ResponseError, allowing
callers to find the exact error code.

Change-Id: I4f8ae5ba39203c2c204fb1d65471d1427bf68b25
Reviewed-on: https://go-review.googlesource.com/18944
Reviewed-by: Adam Langley <agl@golang.org>