X-Git-Url: https://code.wpia.club/?p=cassiopeia.git;a=blobdiff_plain;f=src%2Fcrypto%2FX509.cpp;fp=src%2Fcrypto%2FX509.cpp;h=3d0efbcc8fa75f516cab1c01d3fb29eb6200f67f;hp=9c2ed9a38d88aa7650940bc69049700146a80334;hb=605acfca533ba9eb66e192a18a3af5a847568a03;hpb=d387c2b5e1ac4a8810537e67a4f09c3e2c8a685d

diff --git a/src/crypto/X509.cpp b/src/crypto/X509.cpp
index 9c2ed9a..3d0efbc 100644
--- a/src/crypto/X509.cpp
+++ b/src/crypto/X509.cpp
@@ -185,7 +185,7 @@ void X509Cert::setExtensions( std::shared_ptr<X509> caCert, std::vector<std::sha
     std::string ku = std::string( "critical," ) + prof.ku;
     add_ext( caCert, target, NID_key_usage, ku.c_str() );
     add_ext( caCert, target, NID_ext_key_usage, prof.eku.c_str() );
-    add_ext( caCert, target, NID_info_access, ( ( ocspPath.empty() ? "" : "OCSP;URI:" + ocspPath + "," ) + "caIssuers;URI:" + crtURL ).c_str() );
+    add_ext( caCert, target, NID_info_access, ( ( ocspPath.empty() || prof.include.find( "noOCSP" ) != prof.include.end() ? "" : "OCSP;URI:" + ocspPath + "," ) + "caIssuers;URI:" + crtURL ).c_str() );
     add_ext( caCert, target, NID_crl_distribution_points, ( "URI:" + crlURL ).c_str() );
 
     if( sans.empty() ) {