Hi there,

I was trying to make stunnel ignore OCSP verification error for local certificates when doing OCSP Stapling.  But it seems the flag "OCSPflag = NOVERIFY" is not properly passed to openssl.

I have tried to patch it in function ocsp_stapling(), and it worked.

But I wonder whether it is a bug or intentionally designed this way?

With kind regards！

------------------------------------------------------------

King's Way  <io[AT]stdio.io>