[issue17123] Add OCSP support to ssl module

[Daniel Kahn Gillmor]

Daniel Kahn Gillmor <dkg at fifthhorseman.net> added the comment:

It would be great to see at least minimal OCSP stapling support (in the form of callbacks on the client and server sides) availabl in the ssl module, similar to the way that pyopenssl has added such callbacks:

    https://github.com/pyca/pyopenssl/pull/580

If that was present in the ssl module, then it would let other implementations supply reasonable callback functionality for fetching and relaying stapled OCSP responses (on the server side) and validating in-band OCSP responses (on the client side).

----------
nosy: +dkg

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue17123>
_______________________________________