tree 1cc5fbfa1956bafc48220cc2f4c7116e1b64378b
parent ae8bce0030810cf999bb2b9868ae5c7c58e6343b
author Joe Shaw <joe@joeshaw.org> 1503321654 -0400
committer Adam Langley <agl@golang.org> 1525188544 +0000

ocsp: remove error for > 1 certificate in response

Some OCSP responders contain more than one certificate, which can be
used to "help the OCSP client verify the responders signature" (RFC
6960 section 4.2.1).  This client doesn't do verification of the chain
to the root, but it's not an error for a responder to send more than
one.

Fixes golang/go#21527

Change-Id: Ie23cfcb347a4f7cdfb1a0cbad2aa03a1242553af
Reviewed-on: https://go-review.googlesource.com/57510
Reviewed-by: Adam Langley <agl@golang.org>