diff --git a/lib/hx509/revoke.c b/lib/hx509/revoke.c index 857a05c43..4ba2452ef 100644 --- a/lib/hx509/revoke.c +++ b/lib/hx509/revoke.c @@ -208,15 +208,18 @@ load_ocsp(hx509_context context, struct revoke_ocsp *ocsp) return EINVAL; } - /* - * XXX find BasicReponse and act on it - */ - if (resp.responseBytes == NULL) { free_OCSPResponse(&resp); return EINVAL; } + ret = heim_oid_cmp(&resp.responseBytes->responseType, + oid_id_pkix_ocsp_basic()); + if (ret != 0) { + free_OCSPResponse(&resp); + return EINVAL; + } + ret = decode_OCSPBasicOCSPResponse(resp.responseBytes->response.data, resp.responseBytes->response.length, &basic,