tree ba3ce8649bc48e2f4ff3f31358690d69a7ce92b5
parent 0e69e08b8a4ea0fbd49846e211075f79ca0fff4f
author Paul van Brouwershaven <paul@vanbrouwershaven.com> 1433256884 +0000
committer Russ Cox <rsc@golang.org> 1475776021 +0000

x/crypto/ocsp: Accept status for multiple certificates in response

This change add a function select to correct response from a responder
that includes multiple certificates in the case the server uses response
pre-generation.

RFC6960 section 4.2.2 states:

"The response MUST include a SingleResponse for each certificate in
   the request.  The response SHOULD NOT include any additional
   SingleResponse elements, but, for example, OCSP responders that
   pre-generate status responses might include additional SingleResponse
   elements if necessary to improve response pre-generation performance
   or cache efficiency (according to [RFC5019], Section 2.2.1)."

Change-Id: I39eeaa3daf16a7d7eb030e34229f16cf4295f9d7
Reviewed-on: https://go-review.googlesource.com/10611
Reviewed-by: Russ Cox <rsc@golang.org>