Hi there, I was trying to make stunnel ignore OCSP verification error for local certificates when doing OCSP Stapling.  But it seems the flag "OCSPflag = NOVERIFY" is not properly passed to openssl. I have tried to patch it in function ocsp_stapling(), and it worked. But I wonder whether it is a bug or intentionally designed this way? With kind regards！ ------------------------------------------------------------ King's Way  <io[AT]stdio.io<http://stdio.io>>